Hi, I would like to understand the purpose and legitimacy of the following resource observed in our environment: Domain: aiinfrastructure.static.microsoft Path: MLbasedVBSSContentClassifier/.../model.gz Additionally, we observed metadata related to a model with the following characteristics: Source: Azure feed Model type: ML-based classifier Encryption: AES256 This activity appears to be related to model download or update. Could you please confirm: If this behavior is expected from Microsoft services (e.g. Defender, Windows, Teams, etc.) Which product or component is responsible for this communication If this traffic can be safely allowlisted in a security monitoring context No sensitive internal data is being shared. Thank you.

Question about aiinfrastructure.static.microsoft ML model download behavior

Filipe Rodrigues de Oliveira (Teltec Solutions) 0

Hi,

I would like to understand the purpose and legitimacy of the following resource observed in our environment:

Domain:

aiinfrastructure.static.microsoft

Path:

MLbasedVBSSContentClassifier/.../model.gz

Additionally, we observed metadata related to a model with the following characteristics:

This activity appears to be related to model download or update.

Could you please confirm:

If this behavior is expected from Microsoft services (e.g. Defender, Windows, Teams, etc.)
Which product or component is responsible for this communication
If this traffic can be safely allowlisted in a security monitoring context

No sensitive internal data is being shared.

Thank you.

0 comentários