Microsoft Copilot for Security, which interprets data from all Microsoft’s security products and provides automated explanations and suggested remedies, will be generally available from April 1, one year after it was first announced and five months after its preview period.
Copilot for Security is embedded into Microsoft’s entire security portfolio of products, and it works in Defender, for example, similar to an assistant box where the insights and remediation guidance is generated. Beyond providing insights through the vendor’s security portfolio, Microsoft Copilot for Security also brings insights from other software vendors.
Microsoft Copilot for Security main benefits
Based on the early access progress Microsoft has found four areas with greatest benefits to users, which are incident summarization, impact analysis, reverse engineering of scripts and step-by-step incident response. Copilot for Security provides incident summaries using generative AI to turn complex alerts into clear actionable summaries. It also uses AI-driven analytics to assess the potential impact of security incidents, offering insights into affected systems and data to prioritize response efforts.
Microsoft Copilot for Security analyzes complex command line scripts and translate them into natural language with clear explanations of actions. It extracts and links indicators found in the script to their respective entities in the user environment.
Copilot for Security provides actionable step-by-step guidance for incident response, including directions for triage, investigation, containment, and remediation. Relevant deep links to recommended actions allow for quicker response.
One of the main benefits of these features is that they help junior professionals write queries in natural language and get responses that they can understand. This can come in handy considering the “large and chronic talent shortage” as Microsoft VP of security marketing Andrew Conway called it. According to Microsoft’s own data from the early access use, experienced security analysts were 22% faster with Copilot and were 7% more accurate across all tasks when using Copilot. Almost all, 97%, said they want to use Copilot the next time they perform the same task.
