Microsoft Security Copilot is a generative artificial intelligence (AI) assistant for security teams. Besides its standalone portal, it is embedded directly into the Microsoft Defender portal, where it appears in a side panel on incidents, alerts, devices, users and hunting pages. It runs on capacity your organization provisions, measured in security compute units (SCUs), and users need appropriate access to both Copilot and the underlying Defender data. Copilot only sees data the signed-in user is allowed to see, so it cannot be used to get around role-based access control. Its value is speed: it turns a pile of alerts and raw evidence into readable language so an analyst can decide faster.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.