Looks like there is a new defender deployment tool v1.0.0.9 and we are in the middle of a workstation migration and now the off boarding packages are failing with exit code 1000. What has changed? We are using the same logic from version 1.0.0.6.

DefenderDT.exe -Offboard -File:C:\OffboardingPackage.offboarding -Yes -Quiet

Even running manually having it download the new version from 1.0.0.6 and then running 1.0.0.9 exits with code 1000.

Anyone else noticed the same thing or did Microsoft break something?

Has anyone else noticed a severe uptick of these "Suspicious AI prompt injection blocked" alerts over the weekend? From what I can tell it's mainly CLI prompts causing these alerts for tools like Copilot SDK and Copilot CLI. If so what have you been doing to tune these alerts?