From the course: Microsoft Security Copilot

Unlock this course with a free trial

Join today to access over 24,800 courses taught by industry experts.

The workflow of Microsoft Security Copilot

The workflow of Microsoft Security Copilot - Microsoft Security Copilot Tutorial

From the course: Microsoft Security Copilot

The workflow of Microsoft Security Copilot

- [Instructor] Let's take one step deeper and look at the workflow of Microsoft Security Copilot. Security Copilot use its orchestrator to interact with user interfaces, including the standalone Security Copilot portal, and the Microsoft security solutions with Copilot embedded, like Microsoft Defender XDR, Entra, and Intune, plugins for integrating with Microsoft security products' third-party products or custom services, and AI services, including large language model or LLM, responsible AI for checking input prompts and output responses, and Azure Open AI service. Here's how it works. First, a user prompt is sent to Security Copilot. Next, Security Copilot selects the right plugins to pre-process the prompt so it can retrieve specific context. For example, it can call Microsoft Defender Threat Intelligence to get information about a vulnerability based on the CVE ID in the use of prompt. This process is called grounding. It helps AI generate more relevant and actionable answers…

Contents