The Tech Panda takes a look at recent launches in the superfast field of Artificial Intelligence (AI).
Cybersecurity: Security Copilot Agent Portfolio Now Live with Two Agents on the Microsoft Security Store
Inspira Enterprise, a cybersecurity, data, and AI solutions, digital resilience, and platform-driven transformation platform, announced the general availability of two agents in Microsoft Security Copilot, the MITRE ATT&CK Coverage Insight Agent and the Initial Triage Agent, both now live on the Microsoft Security Store. The MITRE ATT&CK Coverage Insight Agent evaluates analytic rule coverage, calculates ATT&CK coverage, identifies detection gaps, generates detection recommendations, and provides maturity scoring for Security Operations Centers; ATT&CK is a MITRE knowledge base of adversarial tactics, techniques, and procedures. The Initial Triage Agent performs deterministic, evidence-based triage of Microsoft Sentinel and Microsoft Defender XDR incidents, delivering verdicts, confidence scores, classification reasoning, attack timelines, and recommended actions in a structured format built for SOC workflows. The availability of both agents on the Microsoft Security Store brings additional security signals, investigation capabilities, and SOC automation into Security Copilot.
“AI is the force multiplier for defenders, and when partners bring their agentic innovation into the Security Copilot ecosystem, the impact is exponential. Together, we’re not just building tools—we’re creating a new era of intelligent, collaborative cyber defense,” said Vasu Jakkal, Corporate Vice President, Microsoft Security.
FEATURES
MITRE ATT&CK Coverage Insight Agent
- A detection coverage analyzer for Microsoft Sentinel, built within Security Copilot, that evaluates analytic rule coverage, calculates ATT&CK coverage, identifies detection gaps, generates detection recommendations, and provides SOC detection maturity scoring.
- On each run, the agent delivers an executive summary of the coverage, an overall coverage percentage, tactic-level and technique-level coverage breakdowns, a critical uncovered technique list, risk rationale for high-impact gaps, detection improvement recommendations with prioritized remediation guidance, example Sentinel-compatible KQL queries, and coverage risk assessment insights for leadership and SOC teams.
- Performs analysis only — it does not execute queries or modify rules — helping teams prioritize missing detections, improve analytic rule coverage, and align security operations with real adversary behaviours.
Initial Triage Agent
- A deterministic, contract-locked initial triage agent for Microsoft Sentinel and Microsoft Defender XDR incidents.
- Built within Security Copilot, it automatically detects the incident source and retrieves incident metadata, alerts, entities, comments, status and classification context, guided response (where available), and historical incidents with matching entities or similar alert patterns.
- The agent performs evidence-based triage across new, active/open, and closed/resolved incidents using only Sentinel and Defender XDR–native data, and applies bounded historical closure pattern analysis to improve analyst-grade disposition consistency.
- On every execution, it produces a structured, Logic App–ready output that includes a Verdict, Confidence Score, Classification Reasoning, Live Entity Investigation Summary, Critical Evidence Observed, Attack Timeline, Recommended Actions, incident source identification (Sentinel or XDR), current status and context assessment, and relevant historical incident comparison insights.
- The agent is read-only — it does not modify incidents, alerts, or configurations — which helps SOC teams shorten mean-time-to-triage, reduce alert fatigue, and drive consistent Tier-1 decision-making while keeping analysts firmly in control.
Cybersecurity: CodeInjectionGuard to Defend AI Agents Against Runtime Code Injection Attacks
Operant AI launched CodeInjectionGuard, a new capability for its Agent Protector product that detects and blocks malicious code before it can be executed by AI agents operating on endpoints can execute it. The launch addresses a rapidly expanding attack surface created by the rise of agentic AI systems capable of downloading packages, executing shell commands, and interacting with live infrastructure autonomously and at machine speed.
“Finding vulnerabilities and stopping attacks are fundamentally different problems, and the industry is solving them at very different speeds,” said Priyanka Tembey, CTO and co-founder at Operant AI. “AI agents can install packages, execute code, and access sensitive infrastructure in seconds faster than any human reviewer, and faster than any static analysis tool can respond. CodeInjectionGuard was built for this reality: defense at runtime, at the point of execution, where the fight actually happens.”
FEATURES
- Runtime Package Scanning — Intercepts and inspects packages pulled dynamically by AI agent dependency chains before they are permitted to execute, flagging malicious payloads, obfuscated code, suspicious execution hooks, and known attack patterns.
- Shell Execution Monitoring — Evaluates every shell command invoked by an AI agent in real time, distinguishing legitimate developer tooling from credential harvesting, persistence installation, and lateral movement attempts.
- File Read Interception — Enforces policy boundaries when agents attempt to read sensitive files, including SSH keys, cloud credentials, environment variables, and Kubernetes configurations, even when the requesting process appears legitimate.
- Dynamic Code Execution Blocking — Detects and blocks base64-encoded payloads, exec()calls on untrusted code, and dynamically generated scripts before execution is permitted.
Influencer Marketing: Advanced Intelligence Campaign Reporting Suite, Redefining Campaign Measurement Beyond Vanity Metrics
Cre8r.ai, an AI-powered creator performance platform, unveiled its Advanced Intelligence Campaign Reporting Suite — an industry-first reporting module designed to deliver attribution-level insights. The new launch aims to move influencer marketing beyond vanity metrics, enabling brands to measure, understand, and optimise campaign performance with greater precision.
Gaurav Sharma, CEO and Founder, Cre8r.ai, said: “For a long time, influencer marketing has been measured through surface metrics like followers and reach, which don’t always translate into business outcomes. With Advanced Intelligence Campaign Reporting Suite we are taking a step towards bringing more clarity and accountability to creator investments by focusing on signals like sentiment, engagement quality, and intent. The goal is to help brands move beyond visibility and make more outcome-driven decisions.”
FEATURES
- Introduces Engagement Quality Score, virality and velocity tracking, and purchase intent detection to deliver actionable campaign insights
- Designed to help brands treat creator spend with the rigour of performance marketing.
- Includes Overall Sentiment Pulse, Engagement Quality Score (EQS), Virality and Velocity Tracking, Deep-Learning Sentiment Analysis, Purchase Intent Detection, and an Insight Studio.
Sovereign AI: Integrated Indian AI Stack with Successful Deployment on C-DAC’s Indigenous Server Architecture
Turiyam AI, a specialized artificial intelligence compute solutions company from India, successfully deployed its inference engine on an indigenous server architecture at the Centre for Development of Advanced Computing (C-DAC), Pune. The milestone marks the execution of an Indian-developed AI software stack, integrating model and inference engine within a single domestic compute environment.
E Magesh, Director General, C-DAC, said, “C-DAC continues to work closely with industry, academia and research partners to strengthen India’s advanced computing ecosystem. The validation of advanced AI workloads on indigenous computing infrastructure reflects the growing maturity of India’s research and innovation ecosystem. C-DAC is open to enabling platforms that support the development and deployment of next generation technologies.”
FEATURES
- As part of the deployment, Turiyam integrated its inference-first compute platform with Rudra 1 & 2 servers, enabling optimized execution of advanced AI workloads on the indigenous server systems.
- During the validation, a large language model for Hindi language with 37 dialects, was successfully run on Turiyam’s inference engine within the C-DAC infrastructure environment.
Enterprise AI: Superintelligence for Work That Finds Answers, Takes Action & Automates Workflows
Workday, Inc. (NASDAQ: WDAY), the enterprise AI platform for managing people, money, and agents, announced that Sana from Workday – superintelligence for work – is now available to customers worldwide. This includes: Sana for Workday, the new AI interface for Workday; Sana Self-Service Agent, which automates a broad range of HR and finance workflows; and Sana Enterprise, which unlocks Sana’s AI capabilities beyond Workday. With Sana Enterprise, agents can find, orchestrate, and automate work across not only Workday, but all of the enterprise systems and applications employees use every day.
“AI only works in the enterprise when it’s connected to trusted, deterministic systems, and that hybrid architecture is exactly what Workday is building,” said Aneel Bhusri, co-founder, CEO and chair, Workday. “Sana is what brings it all together. It’s not just a new Workday experience—it’s a powerful way for people to search, reason, and orchestrate work across the enterprise.”
FEATURES
- Find: Gives instant, cited answers from company knowledge and Workday data. For example, an employee can ask, “How many vacation days do I have left?” or “What’s the current contract value of Acme Inc.?” and get a clear answer in seconds.
- Act: Executes tasks across connected systems, grounded in enterprise permissions. For example, an employee can ask, “Update my home address and show how this affects my tax forms and benefits?” or “Update the Acme Inc. contract value to $431K.”
- Build: Turns knowledge into ready?to?use dashboards, summaries, and documents. For example, a manager can ask, “Generate a dashboard showing pipeline stage and interview feedback from Workday Recruiting.”
- Automate: Sets up no-code, multi?step workflows so agents can run work behind the scenes. For example, an employee can ask, “Set up a monthly workflow to review my email inbox for receipts, check them against policy, and send me a report to approve before submitting.”
