Microsoft Security Copilot

So we use it to react more quickly to security alerts and issues. Filter through unnecessary alerts, resolve security alerts or issues that come up much quicker. So it does most of the level one triage, and we can focus on level two and level three.

• Increased revenue
• Increased efficiency
• Reduced overhead

I'm currently assigned to a Phising triage agent improvement project. We're using Copilot's agent capabilities which are autonomous workflows to 1. Automatically investigate 2. then close low priority phishing alerts.

My other use cares are around analyzing clients' security postures in Microsoft Intune environments

• MTTR reduction
• Risk reduction and scalability
• it makes talents like myself more scalable

Microsoft Sentinel, Splunk Enterprise Security

It is an in-built AI-based security assistant in the Microsoft ecosystem. It detects threats and responds very quickly. It investigates the security issues and gives us the alerts. It finds out the root cause of the threats by doing the analysis. It reduces human efforts and automatically generates incident reports. It also gives real-time threat intelligence and ensures system security. Addresses the suspicious activities.

• Improves security and efficiency.
• Saves times and detects the abnormal activities.
• Reduce errors rates by giving the guidance.

Security Copilot helps our security teams manage overwhelming volumes of alerts by summarizing and correlating data across Microsoft Defender, Sentinel, and other platforms. We use it for incident investigation, threat hunting, posture assessments, and executive reporting. It also allows us to offload some tasks to more junior members of our team.

• Shift workload to more junior analysts on our team.
• Faster response times to incidents and alerts.

Drafting Documents, Slide Decks or sourcing information from meetings is important. I use Microsoft Security Copilot truly as a tool assisted gatherer. It’s easy to lose track on coordination and team efforts. By incorporating tools like Microsoft Security Copilot you can reduce time to obtain info and help others get unblocked by sharing resources.

• Time spent on projects
• Reaction in engineering hours
• Improvement in creativity

ChatGPT and Google Gemini

ChatGPT, Azure OpenAI Service