A little while ago I demonstrated something fairly simple. An attacker-controlled HTTP User-Agent value was ingested into Microsoft Sentinel as part of normal security telemetry. Security Copilot then consumed that telemetry while analysing the incident. The User-Agent contained an indirect prompt …