From five signal sources your systems already produce: identity and sign-in logs, OAuth apps holding permissions on Microsoft 365, network and DNS traffic to AI domains, browser extension inventories, and data loss prevention alerts. Microsoft documents the network-level approach for shadow AI discovery in Entra Global Secure Access.
