Microsoft is launching its Copilot for Security solution on April 1, bringing its flagship AI's capabilities to cybersecurity.
In what Microsoft describes as "the industry's first generative solution" to "help security and IT professionals catch what others miss, move faster, and strengthen team expertise", Copilot for Security will function ostensibly as a chatbot for security admins to leverage to read and analyse critical information such as threat summaries and security incidents.
Copilot for Security's new capabilities will include features such as usage reporting, Microsoft Entra audit logs and diagnostic logs, third-party integrations and the ability to connect to an organisation's curated external attack surface from Microsoft Defender External Attack Surface Management.
Vasu Jakkal, Corporate Vice President, Security, Compliance, Identity, and Management at Microsoft, wrote in a blog post:
Copilot is informed by large-scale data and threat intelligence, including more than 78 trillion security signals processed by Microsoft each day, and coupled with large language models to deliver tailored insights and guide next steps. With Copilot, you can protect at the speed and scale of AI and transform your security operations."
Copilot for Security will also be a pay-as-you-go solution rather than a monthly subscription, which is the case with Copilot 365. Microsoft will charge organisations $4 per hour of usage. Microsoft's flexible, consumption-based pricing model allows users to begin using the service swiftly and then scale their usage and costs by their specific needs and budget.
General availability for Copilot for Security is scheduled for April 1, 2024. Copilot supports eight languages for processing prompts and responses and offers a multilingual interface supporting 25 languages, ensuring readiness for prominent regions across North and South America, Europe, and Asia.
Upon general availability, Copilot for Security will be accessible in two ways: an immersive standalone portal or integrated into existing security products. Integration with Microsoft Security products streamlines utilisation for IT and security professionals, leveraging demonstrated speed and accuracy gains. Enjoy familiar product portals enhanced with Copilot capabilities tailored to specific use cases.
Copilot for Security's New Innovations
Among the new capabilities the solution introduces is custom promptbooks. Using the feature, users can create and save their own series of natural language prompts for common security workstreams and tasks.
Currently available in preview, knowledgebase integrations empower users to integrate Copilot for Security with their business logic, allowing them to perform activities based on their step-by-step guides.
Users can connect to their curated external attack surface from Microsoft Defender External Attack Surface Management to identify and analyse the most up-to-date information on their organisation’s external attack surface risks.
Microsoft Entra audit logs and diagnostic logs provide additional insight for security investigations or IT issue analysis. These logs offer summarised, natural language descriptions of audit logs related to specific users or events, enhancing visibility and understanding for practical analysis. Usage reporting offers dashboard insights into how an organisation's teams utilise Copilot, enabling security admins to identify additional opportunities for optimisation.
