Microsoft Security Copilot helps security and IT teams to protect organizations at the speed and scale of AI. It is available in a standalone experience or embedded into other Microsoft Security products.
while answers from ChatGPT can be better some times , having Microsoft Security Copilot integrated directly in your stack is something completely different , it has awareness of you environment , EDR and XDR , security incidents in Microsoft sentinel , your entry ID enivrnment …
My usage of other products is based on SIEM tools. So far, Microsoft Security Copilot is the only product I've seen that works across multiple technologies/products to provide full visibility into security tooling using AI. I know other vendors are working towards this, but …
These are all AI tools buy Copilot is integrated with the Microsoft stack so it is already part of the normal workflow. It is also easier to manage because of this.
I have used mostly ChatGPT and Microsoft Security Copilot. I feel that Microsoft Security Copilot is a little bit better when helping with Microsoft products. I think both products can give you what you want, but Microsoft Security Copilot seems to use a more streamlined …
Copilot is already integrated with and built for the Microsoft stack. It lives in it natively, versus integrating with a third-party. You always know where your data is stored and used. The HIPAA compliance aspect is a big factor to as some third parties will not sign a BAA …
I think we have other products that we have evaluated. Since it's confidential, I can't share it. One is brand for Microsoft and the second is ease of use.
I mostly use it because of the AI. Mitre is more manual process. It's a very old process. So definitely using AI for security is the reason why I went for this product and kind of augmenting my skills is the reason why I chose this.
Microsoft Security Copilot is well-suited for environments where security teams face high alert volumes and need rapid triage. It is effective during active threat response, helping us establish timelines and suggest remediation steps quickly. Copilot also excels in executive reporting, generating clear summaries for leadership without much effort. Security Copilot is less effective outside of Microsoft's ecosystem because it doesn't integrate well with other products.
Anyone can use it. Easy to prompt, also capabilities to become advance with custom agents. It can become custom to your workflow. Many people will have their unique experiences to share and results are generally positive. This is a growth in the product from the effect of community and adoption/usage.
My usage of other products is based on SIEM tools. So far, Microsoft Security Copilot is the only product I've seen that works across multiple technologies/products to provide full visibility into security tooling using AI. I know other vendors are working towards this, but Microsoft has definitely taken a lead.
Helps reduce time spent creating a baseline script.
Some errors get corrected but then get reintroduced while adding functionality.
I noticed that when using this for PowerShell it will sometimes have you install the module in the script without verifying if it is already installed. You must read the script before executing.
