{"id":55654,"date":"2024-03-18T17:30:00","date_gmt":"2024-03-18T17:30:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/microsoft-copilot-for-security-general-availability-details\/"},"modified":"2024-03-18T17:30:00","modified_gmt":"2024-03-18T17:30:00","slug":"microsoft-copilot-for-security-general-availability-details","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-copilot-for-security-general-availability-details\/","title":{"rendered":"Microsoft Copilot for Security: General Availability details"},"content":{"rendered":"

The emergence of GenAI is changing the world as we know it.  This \u2018once in a generation\u2019 technology leap is already helping defenders see more and move faster, complementing human ingenuity and expanding our capabilities to protect beyond what was possible yesterday. <\/span> <\/span><\/p>\n

To help you seize this opportunity, <\/span>we are excited to announce the general availability of Microsoft Copilot for Security<\/span><\/strong> (Copilot) on April 1st. This industry-leading product is the only generative AI solution that helps security and IT professionals amplify their skillset, collaborate more, see more, and respond faster.<\/span> <\/span><\/p>\n

Move at <\/span>the speed of AI<\/span><\/span><\/strong><\/span><\/p>\n

Copilot <\/span>brings insights <\/span>from <\/span>across Microsoft Security <\/span>products<\/span> <\/span>and<\/span><\/span> those of <\/span>other software <\/span>vendors<\/span>,<\/span> delivering<\/span> natural language guidance to increase team efficiency and manage daily workflows.<\/span> Copilot <\/span>isn\u2019t<\/span> a replacement for these tools<\/span>; Instead, it<\/span> enables security and IT professionals to access, summarize, and act on insights from their <\/span>exi<\/span>s<\/span>ting <\/span>tools<\/span> <\/span>faster<\/span><\/span>.<\/span><\/span> <\/span><\/span><\/span><\/span><\/span><\/p>\n

In a recent research study conducted by Microsoft\u2019s Office of the Chief Economist, experienced security analysts using Copilot were 22% faster <\/span>at the common security tasks we gave <\/span>them,<\/span> and they achieved these time savings while also increasing accuracy by 7%.<\/span><\/span> <\/span><\/p>\n

, <\/span>97% <\/span>of <\/span>the <\/span>experienced security analyst<\/span>s<\/span> said they wanted to use Copilot again next time.<\/span><\/span> <\/span><\/span><\/p>\n

\"image<\/span><\/span><\/span><\/p>\n

These gains in speed, accuracy, and sentiment mean that security and IT teams have the power to radically improve not only their work, but also their sense of job satisfaction as they find the time to work on the most critical tasks, vs. being bogged down in the more mundane part of their roles. View the full <\/span>report<\/span><\/a> or <\/span>infographic<\/span><\/a> for more results from the study.<\/span> <\/span><\/p>\n

\u201cRecently we hired a few junior analysts and what we’ve seen is, to get those folks up to speed, with Copilot, the speed is tremendous,” said Mario Ferket, Chief Information Security Officer at Dow. \u201cIf you want to create a complex KQL script, you can now use natural language. This levels the playing field because in the past, the junior analysts would have needed help from senior analysts to do that type of work.\u201d<\/span> <\/span><\/p>\n

 <\/p>\n

Product <\/span>Capabilities<\/span><\/span> <\/span><\/strong><\/span><\/p>\n

B<\/span>ased on our learning from hundreds <\/span>of<\/span> customers during our <\/span>early access<\/span> program, <\/span>that we began back in October, we are highlighting<\/span> four <\/span>critical<\/span> security operations tasks<\/span>, where we expect Copilot to deliver the greatest <\/span>value to your teams at time of release<\/span>:<\/span> <\/span> <\/span><\/span><\/span><\/p>\n

 <\/p>\n

Incident Summarization <\/strong><\/p>\n

Gain context for incidents and improve communication across your organization by leveraging generative AI to swiftly distill complex security alerts into concise, actionable summaries, which then enables quicker response times and streamlined decision-making.<\/span><\/p>\n

 <\/p>\n

Impact Analysis <\/strong><\/p>\n

Utilize AI-driven analytics to assess the potential impact of security incidents, offering insights into affected systems and data to prioritize response efforts effectively.<\/span> <\/span><\/p>\n

 <\/p>\n

Reverse Engineering of Scripts <\/strong><\/p>\n

Eliminate the need to manually reverse engineer malware and enable every analyst to understand the actions executed by attackers. Analyze complex command line scripts and translate them into natural language with clear explanations of actions. Efficiently extract and link indicators found in the script to their respective entities in your environment.<\/span> <\/span><\/p>\n

 <\/p>\n

Guided Response <\/strong><\/p>\n

Receive actionable step-by-step guidance for incident response, including directions for triage, investigation, containment, and remediation. Relevant deep links to recommended actions allow for quicker response.<\/span> <\/span><\/p>\n

 <\/p>\n

Copilot <\/span>is available both via<\/span> an immersive standalone portal <\/span>that h<\/span>elps teams gain a broader context to troubleshoot and remediate incidents faster with<\/span> <\/span>cross-product guidance<\/span><\/span> and <\/span>t<\/span>hrough<\/span> an<\/span> <\/span>intuitive experience<\/span><\/span> natively<\/span> embedded<\/span> within <\/span>our <\/span>existing <\/span>and<\/span> familiar security products<\/span>.<\/span><\/span> <\/span><\/span><\/p>\n

\"Trevor_Rusher_8-1710175507745.png\"<\/span><\/p>\n

 <\/p>\n

In addition to <\/span>general availability, <\/span>we are also announcing the following <\/span>new <\/span>Copilot <\/span>product capabilities:<\/span><\/span> <\/span><\/span><\/span><\/span><\/p>\n

<\/span> allow customers to create and save their own series of natural language prompts for common security workstreams, tasks, and scenarios. <\/span><\/span> <\/span><\/p>\n

\"Custom<\/span><\/p>\n

base <\/span>integrations<\/span><\/span><\/strong> (<\/span>in <\/span>public preview) <\/span>empowers<\/span> Copilot for Security to integrate your business <\/span>context,<\/span> search<\/span> and query over <\/span>your proprietary<\/span> content. <\/span><\/span> <\/span><\/p>\n

 <\/p>\n

\"Knowledgebase.png\"<\/span><\/p>\n

Usage reporting<\/span><\/span><\/strong> provides<\/span> dashboard insights on how your teams use Copilot so that you can <\/span>identify<\/span> even more opportunities for optimization.<\/span> <\/span><\/span> <\/span><\/p>\n

\"Usage<\/span><\/p>\n

Expanded language localization<\/span><\/span><\/strong> now includes prompting and responses in eight languages and the product interface is now available in 25 languages to deliver improved user experiences.<\/span><\/span><\/p>\n

\"Settings<\/span><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n

Languages<\/strong><\/p>\n<\/td>\n

\n

Availability<\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

English (US, GB, AU, CA, IN)<\/span><\/strong><\/p>\n<\/td>\n

\n

Prompting and product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Spanish (Spain, Mexico)<\/span><\/strong><\/p>\n<\/td>\n

\n

Prompting and product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Japanese<\/span><\/strong><\/p>\n<\/td>\n

\n

Prompting and product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

French (France, Canada)<\/span><\/strong><\/p>\n<\/td>\n

\n

Prompting and product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

German<\/span><\/strong><\/p>\n<\/td>\n

\n

Prompting and product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Portuguese (Brazil)<\/span><\/strong><\/p>\n<\/td>\n

\n

Prompting and product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Italian<\/span><\/strong><\/p>\n<\/td>\n

\n

Prompting and product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Chinese Simplified<\/span><\/strong><\/p>\n<\/td>\n

\n

Prompting and product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Korean<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Dutch<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Swedish<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Polish<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Portuguese (Portugal)<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Norwegian<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Turkish<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Danish<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Finnish<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Chinese Traditional<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Arabic<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Thai<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Hebrew<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Czech<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Hungarian<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Ukrainian<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface<\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n

\n

Russian<\/span><\/strong><\/p>\n<\/td>\n

\n

Product interface <\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Connect to your curated external attack surface from Microsoft Defender EASM<\/span><\/strong> to identify and analyze the most up-to-date information on your organization\u2019s external attack surface risks.<\/span> <\/span><\/p>\n

 <\/span><\/p>\n

Microsoft Entra audit logs and diagnostic logs<\/span><\/strong> give additional insight for a security investigation or IT issue and summarize audit logs related to a specific user or event.<\/span> <\/span><\/p>\n

Use Copilot across your entire security estate<\/span><\/span><\/strong><\/span><\/p>\n

From the beginning, in addition to hundreds of <\/span>early access<\/span> program customers, we have <\/span>worked with a broad set of <\/span>security partners <\/span>to<\/span> help shape Copilot<\/span> for Security. This has included <\/span>validati<\/span>ng<\/span> and refin<\/span>ing<\/span> our new capabilities and<\/span> doing critical work on <\/span>plugins to extend Copilot to an <\/span>ever-growing<\/span> set of security products and data.<\/span><\/span> <\/span><\/span><\/span><\/p>\n

Today we have a rapidly growing library of plugins for Copilot for Security, and we continue to work with our <\/span>partner ecosystem<\/span><\/a> to deliver more. Most recently, we are highlighting:<\/span>
<\/span><\/p>\n