You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-xdr/advanced-hunting-security-copilot.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,7 +31,7 @@ ms.date: 04/01/2024
31
31
32
32
[Microsoft Copilot for Security in Microsoft Defender](security-copilot-in-microsoft-365-defender.md) comes with a query assistant capability in advanced hunting.
33
33
34
-
Threat hunters or security analysts who are not yet familiar with or have yet to learn KQL can make a request or ask a question in natural language (for instance, *Get all alerts involving user admin123*). Copilot for Security then generates a KQL query that corresponds to the request using the advanced hunting data schema.
34
+
Threat hunters or security analysts who aren't yet familiar with or have yet to learn KQL can make a request or ask a question in natural language (for instance, *Get all alerts involving user admin123*). Copilot for Security then generates a KQL query that corresponds to the request using the advanced hunting data schema.
35
35
36
36
This feature reduces the time it takes to write a hunting query from scratch so that threat hunters and security analysts can focus on hunting and investigating threats.
37
37
@@ -71,7 +71,7 @@ Users with access to Copilot for Security have access to this capability in adva
71
71
The generated query appears in the query editor as the last query, where you can edit it before running using the regular **Run query** above the query editor.
72
72
73
73
74
-
1. You can provide feedback about the generated response by selecting the feedback icon  and choosing**Confirm**, **Off-target**, or **Potentially harmful**.
74
+
1. You can provide feedback about the generated response by selecting the feedback icon  and choosing **Confirm**, **Off-target**, or **Potentially harmful**.
75
75
76
76
77
77
> [!TIP]
@@ -83,7 +83,7 @@ Users with access to Copilot for Security have access to this capability in adva
83
83
84
84
## Query sessions
85
85
86
-
You can start your first session anytime by asking a question in the Copilot side pane in advanced hunting. Your session contains the requests you made using your user account. Closing the side pane or refreshing the advanced hunting page does not discard the session. You can still access the generated queries should you need them.
86
+
You can start your first session anytime by asking a question in the Copilot side pane in advanced hunting. Your session contains the requests you made using your user account. Closing the side pane or refreshing the advanced hunting page doesn't discard the session. You can still access the generated queries should you need them.
87
87
88
88
Select the chat bubble icon (**New chat**) to discard the current session.
0 commit comments