Microsoft patents AI that explains why it flags files as malware

1. A system comprising: a processor system; and a memory that stores computer-executable instructions that are executable by the processor system to at least: generate a target vector based at least on an identifier that identifies a target file, content of the target file, and an AI prompt; determine extents to which historical vectors associated with historical files, which are previously classified by an AI model, correspond to the target vector; select a first historical vector from the historical vectors based at least on the extent to which the first historical vector corresponds to the target vector being greater than or equal to an extent threshold; cause the AI model to classify the target file in a malicious class or a non-malicious class and to provide an explanation that describes reasoning used by the AI model in choosing the malicious class or the non-malicious class by providing the AI prompt together with the target file and classification information associated with the first historical vector as inputs to the AI model, the AI prompt requesting that the AI model choose between the malicious class and the non-malicious class and further requesting the explanation that describes the reasoning used by the AI model in choosing the malicious class or the non-malicious class; receive a response to the AI prompt from the AI model, the response comprising an indication of a selected class in which the AI model classifies the target file and further comprising the explanation that describes the reasoning used by the AI model in choosing the selected class, wherein the selected class is the malicious class or the non-malicious class; provide the explanation, which describes the reasoning used by the AI model in choosing the selected class, to a user via a user interface; and based at least on the indication of the selected class in which the AI model classifies the target file, perform a security operation with regard to the target file.