Skip to content

Commit 16b1d86

Browse files
committed
updated links
1 parent 1b0810e commit 16b1d86

File tree

2 files changed

+24
-24
lines changed

2 files changed

+24
-24
lines changed

defender/threat-intelligence/security-copilot-and-defender-threat-intelligence.md

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -22,11 +22,11 @@ ms.date: 11/18/2024
2222
# Microsoft Security Copilot in Microsoft Defender Threat Intelligence
2323

2424
>[!IMPORTANT]
25-
> On June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (https://ti.defender.microsoft.com) was retired and is no longer accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Security Copilot](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
25+
> On June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (`https://ti.defender.microsoft.com`) was retired and is no longer accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Security Copilot](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
2626
27-
Microsoft Security Copilot is a cloud-based AI platform that provides natural language copilot experience. It can help support security professionals in different scenarios, like incident response, threat hunting, and intelligence gathering. For more information about what it can do, read [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot).
27+
Microsoft Security Copilot is a cloud-based AI platform that provides natural language copilot experience. It can help support security professionals in different scenarios, like incident response, threat hunting, and intelligence gathering. For more information about what it can do, read [What is Microsoft Security Copilot?](/copilot/security/microsoft-security-copilot).
2828

29-
Security Copilot customers gain for each of their authenticated Copilot users access to Microsoft Defender Threat Intelligence (Defender TI). To ensure that you have access to Copilot, see the [Security Copilot purchase and licensing information](/security-copilot/faq-security-copilot).
29+
Security Copilot customers gain for each of their authenticated Copilot users access to Microsoft Defender Threat Intelligence (Defender TI). To ensure that you have access to Copilot, see the [Security Copilot purchase and licensing information](/copilot/security/faq-security-copilot).
3030

3131
Once you have access to Security Copilot, the key features discussed in this article become accessible in either the Security Copilot portal or the [Microsoft Defender portal](using-copilot-threat-intelligence-defender-xdr.md).
3232

@@ -35,11 +35,11 @@ Once you have access to Security Copilot, the key features discussed in this art
3535

3636
If you're new to Security Copilot, you should familiarize yourself with it by reading these articles:
3737

38-
- [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot)
39-
- [Microsoft Security Copilot experiences](/security-copilot/experiences-security-copilot)
40-
- [Get started with Microsoft Security Copilot](/security-copilot/get-started-security-copilot)
41-
- [Understand authentication in Microsoft Security Copilot](/security-copilot/authentication)
42-
- [Prompting in Microsoft Security Copilot](/security-copilot/prompting-security-copilot)
38+
- [What is Microsoft Security Copilot?](/copilot/security/microsoft-security-copilot)
39+
- [Microsoft Security Copilot experiences](/copilot/security/experiences-security-copilot)
40+
- [Get started with Microsoft Security Copilot](/copilot/security/get-started-security-copilot)
41+
- [Understand authentication in Microsoft Security Copilot](/copilot/security/authentication)
42+
- [Prompting in Microsoft Security Copilot](/copilot/security/prompting-security-copilot)
4343

4444
## Security Copilot integration in Defender TI
4545

@@ -50,14 +50,14 @@ Security Copilot delivers information about threat actors, indicators of comprom
5050
- Summarize threat intelligence data for "malicious.com."
5151
- Be specific when referencing an incident (for example, "incident ID 15324").
5252
- Experiment with different prompts and variations to see what works best for your use case. Chat AI models vary, so iterate and refine your prompts based on the results you receive.
53-
- Copilot saves your prompt sessions. To see the previous sessions, from the Security Copilot [Home menu](/security-copilot/navigating-security-copilot#home-menu), go to **My sessions**.
53+
- Copilot saves your prompt sessions. To see the previous sessions, from the Security Copilot [Home menu](/copilot/security/navigating-security-copilot#home-menu), go to **My sessions**.
5454

5555
![Screenshot that shows the Microsoft Security Copilot Home menu with My sessions highlighted.](/defender/threat-intelligence/media/defender-ti-and-copilot/copilot-my-sessions.png)
5656

5757
> [!NOTE]
58-
> For a walkthrough on Copilot, including the pin and share feature, read [Navigate Microsoft Security Copilot](/security-copilot/navigating-security-copilot).
58+
> For a walkthrough on Copilot, including the pin and share feature, read [Navigate Microsoft Security Copilot](/copilot/security/navigating-security-copilot).
5959
60-
[Learn more about creating effective prompts](/security-copilot/prompting-tips)
60+
[Learn more about creating effective prompts](/copilot/security/prompting-tips)
6161

6262
## Key features
6363

@@ -74,9 +74,9 @@ You can also select any of the built-in prompts that are available in the Defend
7474
[Learn more about using Copilot in Defender for threat intelligence](using-copilot-threat-intelligence-defender-xdr.md)
7575

7676

77-
## Enable the Security Copilot integration in Defender TI
77+
## Turn on the Security Copilot integration in Defender TI
7878

79-
1. Go to [Microsoft Security Copilot](https://go.microsoft.com/fwlink/?linkid=2247989) and sign in with your credentials.
79+
1. Go to [Microsoft Security Copilot](https://securitycopilot.microsoft.com/) and sign in with your credentials.
8080
2. Make sure that the Defender TI plugin is turned on. In the prompt bar, select the **Sources** icon ![Screenshot of the Sources icon.](/defender/threat-intelligence/media/defender-ti-and-copilot/copilot-sources-icon.png).
8181

8282
![Screenshot of the prompt bar in Microsoft Security Copilot with the Sources icon highlighted.](media/defender-ti-and-copilot/copilot-prompts-bar-sources.png)
@@ -86,7 +86,7 @@ You can also select any of the built-in prompts that are available in the Defend
8686
![Screenshot of the Manage plugins pop-up window with the Microsoft Threat Intelligence plugin highlighted.](media/defender-ti-and-copilot/copilot-manage-plugins.png)
8787

8888
> [!NOTE]
89-
> Some roles can turn the toggle on or off for plugins like Defender TI. For more information, read [Manage plugins in Microsoft Security Copilot](/security-copilot/manage-plugins).
89+
> Some roles can turn the toggle on or off for plugins like Defender TI. For more information, read [Manage plugins in Microsoft Security Copilot](/copilot/security/manage-plugins).
9090

9191

9292
3. Enter your prompt in the prompt bar.
@@ -104,10 +104,10 @@ To view the list of built-in system capabilities for Defender TI:
104104
2. Select **See all system capabilities**. The *Microsoft Threat Intelligence* section lists all the available capabilities for Defender TI that you can use.
105105

106106
Copilot also has the following promptbooks that also deliver information from Defender TI:
107+
- [**Check impact of an external threat article**](/copilot/security/using-promptbooks#check-impact-of-an-external-threat-article) – Analyzes an external or third-party (that is, not published in Defender TI) article to extract related IOCs, summarize the intelligence, and generate hunting queries so you can assess the potential impact of the threat reported in the article to your organization.
107108
- [**Threat actor profile**](/copilot/security/using-promptbooks#threat-actor-profile) – Generates a report profiling a known threat actor, including suggestions to defend against their common tools and tactics.
109+
- [**Threat Intelligence 360 report based on MDTI article**](/copilot/security/using-promptbooks#threat-intelligence-360-report-based-on-mdti-article) – Analyzes a [Defender TI article](what-is-microsoft-defender-threat-intelligence-defender-ti.md#articles) to extract related IOCs, summarize the intelligence, and generate hunting queries so you can assess the potential impact of the threat reported in the article to your organization.
108110
- [**Vulnerability impact assessment**](/copilot/security/using-promptbooks#vulnerability-impact-assessment) – Generates a report summarizing the intelligence for a known vulnerability, including steps on how to address it.
109-
- **Threat Intelligence 360 report based on MDTI article** – Analyzes a [Defender TI article](what-is-microsoft-defender-threat-intelligence-defender-ti.md#articles) to extract related IOCs, summarize the intelligence, and generate hunting queries so you can assess the potential impact of the threat reported in the article to your organization.
110-
- **Check impact of an external threat article** – Analyzes an external or third-party (that is, not published in Defender TI) article to extract related IOCs, summarize the intelligence, and generate hunting queries so you can assess the potential impact of the threat reported in the article to your organization.
111111

112112
To view these promptbooks, in the prompt bar, select the **Prompts** icon then select **See all promptbooks**.
113113

@@ -172,10 +172,10 @@ For each feedback button, you can provide more information in the next dialog bo
172172

173173
## Privacy and data security in Security Copilot
174174

175-
When you interact with Security Copilot to get Defender TI data, Copilot pulls that data from Defender TI. The prompts, the data retrieved, and the output shown in the prompt results are processed and stored within the Copilot service. [Learn more about privacy and data security in Microsoft Security Copilot](/security-copilot/privacy-data-security)
175+
When you interact with Security Copilot to get Defender TI data, Copilot pulls that data from Defender TI. The prompts, the data retrieved, and the output shown in the prompt results are processed and stored within the Copilot service. [Learn more about privacy and data security in Microsoft Security Copilot](/copilot/security/privacy-data-security)
176176

177177
### See also
178178

179-
- [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot)
180-
- [Privacy and data security in Microsoft Security Copilot](/security-copilot/privacy-data-security)
179+
- [What is Microsoft Security Copilot?](/copilot/security/microsoft-security-copilot)
180+
- [Privacy and data security in Microsoft Security Copilot](/copilot/security/privacy-data-security)
181181
- [Using Microsoft Security Copilot for threat intelligence](using-copilot-threat-intelligence-defender-xdr.md)

defender/threat-intelligence/using-copilot-threat-intelligence-defender-xdr.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,16 +25,16 @@ ms.date: 11/18/2024
2525
- [Microsoft Defender XDR](/defender-xdr)
2626

2727
>[!IMPORTANT]
28-
> On June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (https://ti.defender.microsoft.com) was retired and is no longer accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Security Copilot](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
28+
> On June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (`https://ti.defender.microsoft.com`) was retired and is no longer accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Security Copilot](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
2929
30-
Microsoft Copilot in Defender applies the capabilities of [Microsoft Security Copilot](/security-copilot/microsoft-security-copilot) to deliver Microsoft Defender Threat Intelligence (Defender TI) information about threat actors and tools, as well as contextual threat intelligence, directly into the Microsoft Defender portal. Based on threat analytics reports, intel profiles, and other available Defender TI content, you can use Copilot in Defender to summarize the latest threats affecting your organization, know which threats to prioritize based on your exposure level, or gain more knowledge about your organization's or the global threat landscape.
30+
Microsoft Copilot in Defender applies the capabilities of [Microsoft Security Copilot](/copilot/security/microsoft-security-copilot) to deliver Microsoft Defender Threat Intelligence (Defender TI) information about threat actors and tools, as well as contextual threat intelligence, directly into the Microsoft Defender portal. Based on threat analytics reports, intel profiles, and other available Defender TI content, you can use Copilot in Defender to summarize the latest threats affecting your organization, know which threats to prioritize based on your exposure level, or gain more knowledge about your organization's or the global threat landscape.
3131

3232
> [!NOTE]
3333
> Defender TI capabilities are also available in Security Copilot standalone experience through the Microsoft Threat Intelligence plugin. [Learn more about Defender TI integration with Security Copilot](security-copilot-and-defender-threat-intelligence.md)
3434
3535
## Technical requirements
3636

37-
Security Copilot customers gain for each of their authenticated Copilot users access to Defender TI within the Defender portal. [Learn how you can get started with Security Copilot](/security-copilot/get-started-security-copilot)
37+
Security Copilot customers gain for each of their authenticated Copilot users access to Defender TI within the Defender portal. [Learn how you can get started with Security Copilot](/copilot/security/get-started-security-copilot)
3838

3939
## Accessing Copilot in Defender for threat intelligence content
4040

@@ -66,7 +66,7 @@ You can experience Security Copilot's capability to look up threat intelligence
6666
6. To start a new chat session with Copilot, select the **New chat** icon ![Screenshot that shows the New chat icon in Copilot in Defender.](media/defender-ti-and-copilot/copilot-defender-new-chat.png).
6767

6868
> [!NOTE]
69-
> Copilot saves your sessions from the Defender portal in the [Security Copilot standalone portal](https://go.microsoft.com/fwlink/?linkid=2247989). To see the previous sessions, from the Copilot [Home menu](/security-copilot/navigating-security-copilot#home-menu), go to **My sessions**. [Learn more about navigating Microsoft Security Copilot](/security-copilot/navigating-security-copilot)
69+
> Copilot saves your sessions from the Defender portal in the [Security Copilot standalone portal](https://securitycopilot.microsoft.com/). To see the previous sessions, from the Copilot [Home menu](/security-copilot/navigating-security-copilot#home-menu), go to **My sessions**. [Learn more about navigating Microsoft Security Copilot](/copilot/security/navigating-security-copilot)
7070
7171
> [!IMPORTANT]
7272
> Copilot in Defender starts a new chat session every time you navigate to a different *Threat intelligence* page (for example, when you go from *Threat analytics* to *Intel profiles*) in the Defender portal. If you wish to go back or continue a previous session, go to the Security Copilot standalone portal.
@@ -95,5 +95,5 @@ An important aspect of threat intelligence is keeping up to date with the global
9595

9696
### See also
9797

98-
- [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot)
98+
- [What is Microsoft Security Copilot?](/copilot/security/microsoft-security-copilot)
9999
- [Microsoft Security Copilot and Microsoft Defender Threat Intelligence](security-copilot-and-defender-threat-intelligence.md)

0 commit comments

Comments
 (0)