THE PROMPT for Security Copilot - Issue #26
One Copilot to Rule Them All?
My Prompts
Happy Friday, everyone!
Welcome to this week's newsletter! We have some exciting updates and insights to share with you.
In this edition, we delve into the latest developments in Microsoft Security Copilot. Discover how the Copilot Studio connector enables seamless integration with Microsoft Security Copilot, transforming critical workflows around policy management, troubleshooting, and security threat resolution 1. Learn about the upcoming Defender Masterclass, where you can master the integration of Security Copilot with Microsoft Defender to optimize threat hunting and improve security workflows.
Additionally, we explore the features available in the public preview of Microsoft Security Copilot in Intune, highlighting key integrations designed to enhance endpoint security. Don't miss our blog series on cyber resiliency, where we discuss how Security Copilot can help increase your organization's ability to anticipate, withstand, respond, and recover from cyberattacks.
We have Microsoft Build coming up next month and there may be some sort of announcements for Security Copilot made during that week. <nudge, nudge - wink, wink>
I’m still waiting on approval, but I hope to be at Microsoft Build as a representative in my new role here at Microsoft. We’ll see.
But I will definitely see many of you next month at the Microsoft 365 Community Conference in Vegas. I used to travel to Vegas for conferences at least twice a year for 20 years or so, but this is my first trip back since the Covid gap. I’m really looking forward to it.
…
That’s it from me for this week.
Talk soon.
-Rod
Community Prompts
Blog Series: Charting Your Path to Cyber Resiliency - Part 3: Use Security Copilot to Increase Your Organization’s Cyber Resiliency - Cyber resiliency describes an organization’s ability to anticipate, withstand, respond and recover from adverse conditions caused by cyberattacks. Destructive cyberattacks such as ransomware can be highly impactful to business operations and profitability. With its emphasis on protecting our companies’ most critical business functions, cyber resiliency enhances the reputation of the Cybersecurity function - it can even help us achieve that most elusive goal of demonstrating our value to the business.
Microsoft Security Copilot in Intune deep dive – Part 1: Features available in public preview - Copilot integrates seamlessly into Intune, transforming critical workflows around policy management, troubleshooting, and security threat resolution. With key integrations in Intune Suite for Endpoint Privilege Management and Device Query, Copilot enhances endpoint security by offering AI-driven insights and potential app elevation risk. These capabilities are designed to reduce manual intervention and accelerate response times.
Event Prompts
Join Microsoft Security Copilot for Defender Masterclass - Thu, May 22, 2025 - 12 pm - 2 pm EST | 120 min - Master the integration of Security Copilot with Microsoft Defender to optimize threat hunting, improve security workflows, and safeguard your organization from cyber risks. Learn how to streamline threat detection, response, and investigation with next-generation automation and intelligence. Discover best practices for using Security Copilot in Defender to automate security tasks, provide actionable insights, and strengthen your security operations. Redefine your security operations with cutting-edge technology. Reserve your seat today!
Security Copilot Agents Month on the MSI Show - Join us live on the MSI Show every Monday in June to get a glimpse into how our partners are developing their Agentic AI solutions for Microsoft Security Copilot.
Security Copilot in Microsoft Unified Security Operations workshop - Event by Uros Babic - Thu, May 15, 2025, 1:00 PM - 2:30 PM (your local time) - Agenda:
Microsoft Copilot for Security overview
Core features of Microsoft Copilot for Security
Embedded experiences of Microsoft Copilot for Security
Explore use cases with Microsoft Copilot for Security
Security Copilot Demo Lab
Onboarding Security Copilot
Setup and provision Security Capacity in Azure
Setup enviroment
Prompting in Microsoft Copilot for Security
Try promptbooks
Incident investigation with Microsoft Sentinel and Defender XDR and Security Copilot
Simple Use cases
News Prompts
A brand-new series of demo deep dives just launched -one video per agent- showing how each one works alongside your team to defend faster and smarter.
Watch now on our Security Copilot video hub: https://aka.ms/SecurityCopilotVideoHub
Collateral Prompts
Copilot Studio connector in Microsoft Security Copilot - The Copilot Studio connector enables you to access Security Copilot. This topic provides an introduction to the connector action and its properties to get started integrating Security Copilot in your automation workflows.
The connector exposes the following connector actions:
Submit a Security Copilot prompt - Submit a natural language prompt to create a new Security Copilot investigation. After completion, the evaluation result will then be returned to your workflow.
Fetch a Security Copilot prompt status - Submit a natural language prompt to pull the status of a Security Copilot evaluation. After completion, the evaluation result will then be returned to your workflow.
Prompt of the Week
Analyze recent failed sign-in attempts across all Entra tenants. Identify patterns or potential brute-force attacks.
https://rodtrent.substack.com/p/security-copilot-prompt-of-the-day-ed8/comments
