Microsoft Defender Real-Time Agent Protection: Securing Agents at Runtime
Microsoft Defender's real-time agent protection inspects tool invocations before they run - session context, tool-call allowlists, credential scoping, anomaly detection, egress control - under a read-write agent security model.