Microsoft Security Copilot is now available to more enterprise customers through an invitation-only early access program.
What is Microsoft Security Copilot?
“Security Copilot is an AI assistant for security teams that is built on modern large-scale language models and leverages Microsoft security expertise and global threat intelligence to help security teams outperform their adversaries. ” said Vasu Jakkal, Corporate Vice President of Security, Compliance and Identity. , Microsoft management.
Available in private preview since March 2023, Security Copilot lets security analysts simplify threat hunting by sending natural language prompts and getting actionable responses, similar to ChatGPT. Masu.
Provides an overview of a given incident, providing details about how the incident occurred and a technical overview to assist responders with their investigation.
This allows security teams to inspect scripts and code and identify whether a script is malicious without using external tools.
Threat hunters can use Query Assistant to turn natural language questions into ready-to-execute Kusto Query Language (KQL) queries.
Finally, Security Copilot also helps you manage your security posture by helping you pinpoint whether your organization is susceptible to known vulnerabilities and exploits. It then provides guidance for risk prioritization and remediation.
“Security Copilot is already helping preview customers save up to 40% time on core security operations tasks with the ability to create complex queries and summarize security incidents based solely on natural language questions. ” Jakkal asserts.
“[It] Effectively upskill your security team, regardless of their expertise, saving them time, helping them find things they might have previously overlooked, and allowing them to focus on their most impactful projects. . ”
New features and integrations
Security Copilot integrates with the company’s XDR platform (Microsoft 365 Defender) and uses the information and insights provided to help analysts accelerate investigation and remediation.
Microsoft Defender Threat Intelligence will also be available to analysts within Security Copilot at no additional cost.
“Additionally, organizations that work with managed security service providers (MSSPs) and participate in the Early Access Program will now be able to expand access to the Security Copilot environment, allowing MSSPs to expand their access to the Security Copilot (“Bring Your Own”) MSSP” allows you to join MSSP) “)”, Jackal I got it..
Businesses can contact Microsoft to see if they can participate in the early access program.