Skip to content

Commit d089f90

Browse files
committed
new two topics
1 parent 5463d48 commit d089f90

File tree

2 files changed

+45
-45
lines changed

2 files changed

+45
-45
lines changed

defender/threat-intelligence/security-copilot-and-defender-threat-intelligence.md

Lines changed: 32 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
2-
title: Microsoft Copilot for Security in Microsoft Defender Threat Intelligence
3-
description: Learn about Microsoft Defender Threat Intelligence capabilities embedded in Copilot for Security.
4-
keywords: security copilot, threat intelligence, defender threat intelligence, defender ti, copilot for security, embedded experience, vulnerability impact assessment, threat actor profile, plugins, Microsoft plugins
2+
title: Microsoft Security Copilot in Microsoft Defender Threat Intelligence
3+
description: Learn about Microsoft Defender Threat Intelligence capabilities embedded in Security Copilot.
4+
keywords: security copilot, threat intelligence, defender threat intelligence, defender ti, Security Copilot, embedded experience, vulnerability impact assessment, threat actor profile, plugins, Microsoft plugins
55
ms.service: defender-xdr
66
ms.author: pauloliveria
77
author: poliveria
@@ -16,49 +16,49 @@ ms.topic: conceptual
1616
ms.date: 12/04/2023
1717
---
1818

19-
# Microsoft Copilot for Security in Microsoft Defender Threat Intelligence
19+
# Microsoft Security Copilot in Microsoft Defender Threat Intelligence
2020

2121
>[!IMPORTANT]
22-
> On June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (https://ti.defender.microsoft.com) was retired and is no longer accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Copilot for Security](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
22+
> On June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (https://ti.defender.microsoft.com) was retired and is no longer accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Security Copilot](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
2323
24-
Microsoft Copilot for Security is a cloud-based AI platform that provides natural language copilot experience. It can help support security professionals in different scenarios, like incident response, threat hunting, and intelligence gathering. For more information about what it can do, read [What is Microsoft Copilot for Security?](/security-copilot/microsoft-security-copilot).
24+
Microsoft Security Copilot is a cloud-based AI platform that provides natural language copilot experience. It can help support security professionals in different scenarios, like incident response, threat hunting, and intelligence gathering. For more information about what it can do, read [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot).
2525

26-
Copilot for Security customers gain for each of their authenticated Copilot users access to Microsoft Defender Threat Intelligence (Defender TI). To ensure that you have access to Copilot, see the [Copilot for Security purchase and licensing information](/security-copilot/faq-security-copilot).
26+
Security Copilot customers gain for each of their authenticated Copilot users access to Microsoft Defender Threat Intelligence (Defender TI). To ensure that you have access to Copilot, see the [Security Copilot purchase and licensing information](/security-copilot/faq-security-copilot).
2727

28-
Once you have access to Copilot for Security, the key features discussed in this article become accessible in either the Copilot for Security portal or the [Microsoft Defender portal](using-copilot-threat-intelligence-defender-xdr.md).
28+
Once you have access to Security Copilot, the key features discussed in this article become accessible in either the Security Copilot portal or the [Microsoft Defender portal](using-copilot-threat-intelligence-defender-xdr.md).
2929

3030

3131
## Know before you begin
3232

33-
If you're new to Copilot for Security, you should familiarize yourself with it by reading these articles:
33+
If you're new to Security Copilot, you should familiarize yourself with it by reading these articles:
3434

35-
- [What is Microsoft Copilot for Security?](/security-copilot/microsoft-security-copilot)
36-
- [Microsoft Copilot for Security experiences](/security-copilot/experiences-security-copilot)
37-
- [Get started with Microsoft Copilot for Security](/security-copilot/get-started-security-copilot)
38-
- [Understand authentication in Microsoft Copilot for Security](/security-copilot/authentication)
39-
- [Prompting in Microsoft Copilot for Security](/security-copilot/prompting-security-copilot)
35+
- [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot)
36+
- [Microsoft Security Copilot experiences](/security-copilot/experiences-security-copilot)
37+
- [Get started with Microsoft Security Copilot](/security-copilot/get-started-security-copilot)
38+
- [Understand authentication in Microsoft Security Copilot](/security-copilot/authentication)
39+
- [Prompting in Microsoft Security Copilot](/security-copilot/prompting-security-copilot)
4040

41-
## Copilot for Security integration in Defender TI
41+
## Security Copilot integration in Defender TI
4242

43-
Copilot for Security delivers information about threat actors, indicators of compromise (IOCs), tools, and vulnerabilities, as well as contextual threat intelligence from Defender TI. You can use the prompts and promptbooks to investigate incidents, enrich your hunting flows with threat intelligence information, or gain more knowledge about your organization's or the global threat landscape.
43+
Security Copilot delivers information about threat actors, indicators of compromise (IOCs), tools, and vulnerabilities, as well as contextual threat intelligence from Defender TI. You can use the prompts and promptbooks to investigate incidents, enrich your hunting flows with threat intelligence information, or gain more knowledge about your organization's or the global threat landscape.
4444

4545
- Be clear and specific with your prompts. You might get better results if you include specific threat actor names or IOCs in your prompts. It might also help if you add **threat intelligence** to your prompt, like:
4646
- Show me threat intelligence data for Aqua Blizzard.
4747
- Summarize threat intelligence data for "malicious.com."
4848
- Be specific when referencing an incident (for example, "incident ID 15324").
4949
- Experiment with different prompts and variations to see what works best for your use case. Chat AI models vary, so iterate and refine your prompts based on the results you receive.
50-
- Copilot saves your prompt sessions. To see the previous sessions, from the Copilot for Security [Home menu](/security-copilot/navigating-security-copilot#home-menu), go to **My sessions**.
50+
- Copilot saves your prompt sessions. To see the previous sessions, from the Security Copilot [Home menu](/security-copilot/navigating-security-copilot#home-menu), go to **My sessions**.
5151

52-
![Screenshot that shows the Microsoft Copilot for Security Home menu with My sessions highlighted.](/defender/threat-intelligence/media/defender-ti-and-copilot/copilot-my-sessions.png)
52+
![Screenshot that shows the Microsoft Security Copilot Home menu with My sessions highlighted.](/defender/threat-intelligence/media/defender-ti-and-copilot/copilot-my-sessions.png)
5353

5454
> [!NOTE]
55-
> For a walkthrough on Copilot, including the pin and share feature, read [Navigate Microsoft Copilot for Security](/security-copilot/navigating-security-copilot).
55+
> For a walkthrough on Copilot, including the pin and share feature, read [Navigate Microsoft Security Copilot](/security-copilot/navigating-security-copilot).
5656
5757
[Learn more about creating effective prompts](/security-copilot/prompting-tips)
5858

5959
## Key features
6060

61-
Copilot for Security lets security teams understand, prioritize, and take action on threat intelligence information immediately.
61+
Security Copilot lets security teams understand, prioritize, and take action on threat intelligence information immediately.
6262

6363
You can ask about a threat actor, attack campaign, or any other threat intelligence that you want to know more about, and Copilot generates responses based on threat analytics reports, intel profiles and articles, and other Defender TI content.
6464

@@ -71,32 +71,32 @@ You can also select any of the built-in prompts that are available in the Defend
7171
[Learn more about using Copilot in Defender for threat intelligence](using-copilot-threat-intelligence-defender-xdr.md)
7272

7373

74-
## Enable the Copilot for Security integration in Defender TI
74+
## Enable the Security Copilot integration in Defender TI
7575

76-
1. Go to [Microsoft Copilot for Security](https://go.microsoft.com/fwlink/?linkid=2247989) and sign in with your credentials.
76+
1. Go to [Microsoft Security Copilot](https://go.microsoft.com/fwlink/?linkid=2247989) and sign in with your credentials.
7777
2. Make sure that the Defender TI plugin is turned on. In the prompt bar, select the **Sources** icon ![Screenshot of the Sources icon.](/defender/threat-intelligence/media/defender-ti-and-copilot/copilot-sources-icon.png).
7878

79-
![Screenshot of the prompt bar in Microsoft Copilot for Security with the Sources icon highlighted.](media/defender-ti-and-copilot/copilot-prompts-bar-sources.png)
79+
![Screenshot of the prompt bar in Microsoft Security Copilot with the Sources icon highlighted.](media/defender-ti-and-copilot/copilot-prompts-bar-sources.png)
8080

8181
In the **Manage sources** pop-up window that appears, under **Plugins**, confirm that the **Microsoft Threat Intelligence** toggle is turned on, then close the window.
8282

8383
![Screenshot of the Manage plugins pop-up window with the Microsoft Threat Intelligence plugin highlighted.](media/defender-ti-and-copilot/copilot-manage-plugins.png)
8484

8585
> [!NOTE]
86-
> Some roles can turn the toggle on or off for plugins like Defender TI. For more information, read [Manage plugins in Microsoft Copilot for Security](/security-copilot/manage-plugins).
86+
> Some roles can turn the toggle on or off for plugins like Defender TI. For more information, read [Manage plugins in Microsoft Security Copilot](/security-copilot/manage-plugins).
8787

8888

8989
3. Enter your prompt in the prompt bar.
9090

9191
### Built-in system features
9292

93-
Copilot for Security has built-in system features that can get data from the different plugins that are turned on.
93+
Security Copilot has built-in system features that can get data from the different plugins that are turned on.
9494

9595
To view the list of built-in system capabilities for Defender TI:
9696

9797
1. In the prompt bar, select the **Prompts** icon ![Screenshot of the prompts icon.](/defender/threat-intelligence/media/defender-ti-and-copilot/copilot-prompts-icon.png).
9898

99-
![Screenshot of the prompt bar in Microsoft Copilot for Security with the Prompts icon highlighted.](media/defender-ti-and-copilot/copilot-prompts-bar-prompts.png)
99+
![Screenshot of the prompt bar in Microsoft Security Copilot with the Prompts icon highlighted.](media/defender-ti-and-copilot/copilot-prompts-bar-prompts.png)
100100

101101
2. Select **See all system capabilities**. The *Microsoft Defender Threat Intelligence* section lists all the available capabilities for Defender TI that you can use.
102102

@@ -153,20 +153,20 @@ Get contextual information and threat intelligence on Common Vulnerabilities and
153153

154154
## Provide feedback
155155

156-
Your feedback on the Defender TI integration in Copilot for Security helps with development. To provide feedback, in Copilot, select **How's this response?** At the bottom of each completed prompt and choose any of the following options:
156+
Your feedback on the Defender TI integration in Security Copilot helps with development. To provide feedback, in Copilot, select **How's this response?** At the bottom of each completed prompt and choose any of the following options:
157157
- **Looks right** - Select this button if the results are accurate, based on your assessment.
158158
- **Needs improvement** - Select this button if any detail in the results is incorrect or incomplete, based on your assessment.
159159
- **Inappropriate** - Select this button if the results contain questionable, ambiguous, or potentially harmful information.
160160

161161
For each feedback button, you can provide more information in the next dialog box that appears. Whenever possible, and when the result is **Needs improvement**, write a few words explaining what can be done to improve the outcome. If you entered prompts specific to Defender TI and the results aren't related, then include that information.
162162

163163

164-
## Privacy and data security in Copilot for Security
164+
## Privacy and data security in Security Copilot
165165

166-
When you interact with Copilot for Security to get Defender TI data, Copilot pulls that data from Defender TI. The prompts, the data retrieved, and the output shown in the prompt results are processed and stored within the Copilot service. [Learn more about privacy and data security in Microsoft Copilot for Security](/security-copilot/privacy-data-security)
166+
When you interact with Security Copilot to get Defender TI data, Copilot pulls that data from Defender TI. The prompts, the data retrieved, and the output shown in the prompt results are processed and stored within the Copilot service. [Learn more about privacy and data security in Microsoft Security Copilot](/security-copilot/privacy-data-security)
167167

168168
### See also
169169

170-
- [What is Microsoft Copilot for Security?](/security-copilot/microsoft-security-copilot)
171-
- [Privacy and data security in Microsoft Copilot for Security](/security-copilot/privacy-data-security)
172-
- [Using Microsoft Copilot for Security for threat intelligence](using-copilot-threat-intelligence-defender-xdr.md)
170+
- [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot)
171+
- [Privacy and data security in Microsoft Security Copilot](/security-copilot/privacy-data-security)
172+
- [Using Microsoft Security Copilot for threat intelligence](using-copilot-threat-intelligence-defender-xdr.md)

0 commit comments

Comments
 (0)