Merge pull request #50352 from ceperezb/CEPEREZB-security-copilot-get-started

Ceperezb security copilot get started

Author: v-ccolin

learn-pr/wwl-sci/security-copilot-getting-started/includes/3-describe-terminology.md

@@ -6,9 +6,10 @@ The following terms are important for understanding the way Microsoft Security C
 
 - Session – A particular conversation within Copilot. Copilot maintains context within a session.
 - Prompt – A specific statement or question within a session. A user enters a prompt in the prompt bar.
-- Capability – A function Copilot uses to solve part of a problem.  A capability may sometimes be referred to as a skill.
+- Capability – A function Copilot uses to solve part of a problem. A capability may sometimes be referred to as a skill.
 - Plugin – A collection of capabilities by a particular resource.
 - Workspace - Copilot workspaces are separate Copilot work environments within the tenant in which your Copilot instance is operating.
+- Agents - Microsoft Security Copilot agents are AI-powered tools that autonomously manage security and IT tasks, enhancing threat response, reducing manual workloads, and improving efficiency across cybersecurity operations at scale.
 - Orchestrator – Copilot’s system for composing capabilities together to answer a user’s prompt.
 
 ***Prompt bar and sessions***
@@ -33,11 +34,11 @@ A plugin for Microsoft Sentinel may have similar capabilities but runs only with
 
 Copilot currently supports plug-ins for Microsoft services and non-Microsoft services, including websites and custom plug-ins that can be enabled.
 
-:::image type="content" source="../media/microsoft-plugins-updated.png" lightbox="../media/microsoft-plugins-updated.png" alt-text="A screen capture of the plugins window, showing the Microsoft plugins, including Entra, Intune, Microsoft Defender XDR, and more.":::
+:::image type="content" source="../media/microsoft-plugins-updated.png" lightbox="../media/microsoft-plugins-updated.png" alt-text="A screen capture of the plugins window, showing the Microsoft plugins, including Microsoft Entra, Intune, Microsoft Defender XDR, and more.":::
 
 :::image type="content" source="../media/non-microsoft-plugins-updated.png" lightbox="../media/non-microsoft-plugins-updated.png" alt-text="A screen capture of the plugins window, showing the non-Microsoft plugins, including ServiceNow, Splunk, the public web, and custom plugins.":::
 
-Some plugins require setup and configuration, as depicted by the Set up button or the gear icon. For Microsoft plugins, set up may be required where resource specific information needs to be specified. For non-Microsoft sources, set up may be required for account authentication.
+Some plugins require setup and configuration, as depicted by the Setup button or the gear icon. For Microsoft plugins, set up may be required where resource specific information needs to be specified. For non-Microsoft sources, set up may be required for account authentication.
 
 ***Workspaces***
 
@@ -57,7 +58,15 @@ Workspaces are powered by capacities and each workspace must have its own capaci
 
 Using workspaces, you can efficiently map and monitor costs based on team needs and budgets, ensuring that teams have the capacity they need and resources are allocated effectively. Having workspaces also allows you to store session data according to geo-specific regulations and adhere to local data protection laws. These are just a few of the benefits of using workspaces.
 
-Refer to the training unit, "Describe workspaces", which is linked in the Summary and resource section of this module, for more information on Copilot workspaces.
+For more information, see "Describe workspaces", which is linked in the Summary and resource section of this module.
+
+***Agents***
+
+A Microsoft Security Copilot agent is an advanced, AI-powered assistant built into Microsoft Security Copilot. These agents go beyond just answering questions—they can autonomously manage high-volume security and IT tasks. They’re deeply integrated with Microsoft’s security tools and can also work with partner solutions. Each agent is tailored for specific security scenarios, such as threat protection, identity management, or data security.
+
+These agents are designed to learn from feedback, adapt to your organization’s workflows, and operate securely within Microsoft’s Zero Trust framework. See the summary and resources unit for links to more information on Microsoft Security Copilot agents.
+
+:::image type="content" source="../media/agents-list-v2.png" lightbox="../media/agents-list-v2.png" alt-text="A screen capture of the agents page in Microsoft Security Copilot.":::
 
 ***Orchestrator***
 

learn-pr/wwl-sci/security-copilot-getting-started/includes/8-summary.md

@@ -19,5 +19,6 @@ Now that you've completed this module, you should be able to:
 - [Microsoft Security Copilot experiences](/security-copilot/experiences-security-copilot)
 - [Understand authentication in Microsoft Security Copilot](/security-copilot/authentication)
 - [Describe workspaces](/training/modules/security-copilot-describe-core-features/2b-describe-workspaces)
+- [Microsoft Security Copilot agents overview](/copilot/security/agents-overview)
 - [Manage security compute unit usage in Security Copilot](/copilot/security/manage-usage)
 - [Microsoft Security Copilot pricing](https://azure.microsoft.com/pricing/details/microsoft-security-copilot/)

learn-pr/wwl-sci/security-copilot-getting-started/index.yml

@@ -5,7 +5,7 @@ metadata:
   description: Describe Microsoft Security Copilot.
   author: ceperezb
   ms.author: ceperezb
-  ms.date: 04/03/2025
+  ms.date: 05/08/2025
   ms.service: security-copilot
   ai-usage: ai-assisted
   ms.topic: module-standard-task-based