Item: Microsoft Security Copilot
Rating: 8
Author: Lovren Spike

Overall Satisfaction with Microsoft Security Copilot

Use Cases and Deployment Scope

I'm currently assigned to a Phising triage agent improvement project. We're using Copilot's agent capabilities which are autonomous workflows to 1. Automatically investigate 2. then close low priority phishing alerts.
My other use cares are around analyzing clients' security postures in Microsoft Intune environments

Pros and Cons

Pros

consistency with context switching and documentation
Democratizing expertise. This is what I mean by that: I can just type in natural language and it drafts the KQL for me. This was unheard of in the last couple of years

Cons

Copilot can only operate within the permissions of the logged in user

Return on Investment

MTTR reduction
Risk reduction and scalability
it makes talents like myself more scalable

Security Copilot Agents

Absolutely. My organization is heavily exploring Security Copilot agents. We see them as the next logical step beyond simple prompt based investigations. We've explored them in prioritizing critical vulnerabilities across some of our managed clients

Usability

They used principles from popular LLMs so using it feels quite familiar

Key Insights

Do you think Microsoft Security Copilot delivers good value for the price?

Yes

Are you happy with Microsoft Security Copilot's feature set?

Yes

Did Microsoft Security Copilot live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Microsoft Security Copilot go as expected?

I wasn't involved with the implementation phase

Would you buy Microsoft Security Copilot again?

Yes

Other Software Used

Microsoft Sentinel, Splunk Enterprise Security

Likelihood to Recommend

The big challenge with Microsoft Copilot is that it only amplifies existing security weaknesses. It doesn't fix a broken security posture. It just makes the analyst better at finding problems. If you understand this fundamental truth, then you'll learn how to tailor it for any use case.

Comments

Please log in to join the conversation

These Custom security agents could be the future