changed files by pdets auto publish service, publishid[8cacc606-20b4-4470-8a84-875f5a839ec4] and do [publish].

Author: wwlpublish

learn-pr/wwl-azure/secure-sap-microsoft-cloud/1-introduction.yml

@@ -4,7 +4,7 @@ title: Introduction
 metadata:
   title: Introduction
   description: "Introduction"
-  ms.date: 03/20/2025
+  ms.date: 03/24/2025
   author: wwlpublish
   ms.author: bradj
   ms.topic: unit

learn-pr/wwl-azure/secure-sap-microsoft-cloud/2-azure-identity-services-rise.yml

@@ -4,10 +4,10 @@ title: 'Azure identity services with SAP RISE '
 metadata:
   title: Azure identity services with SAP RISE
   description: "Azure identity services with SAP RISE"
-  ms.date: 03/20/2025
+  ms.date: 03/24/2025
   author: wwlpublish
   ms.author: bradj
   ms.topic: unit
-durationInMinutes: 8
+durationInMinutes: 10
 content: |
   [!include[](includes/2-azure-identity-services-rise.md)]

learn-pr/wwl-azure/secure-sap-microsoft-cloud/3-microsoft-security-copilot-rise.yml

@@ -4,10 +4,10 @@ title: Microsoft Security Copilot with SAP RISE
 metadata:
   title: Microsoft Security Copilot with SAP RISE
   description: "Microsoft Security Copilot with SAP RISE"
-  ms.date: 03/20/2025
+  ms.date: 03/24/2025
   author: wwlpublish
   ms.author: bradj
   ms.topic: unit
-durationInMinutes: 6
+durationInMinutes: 16
 content: |
   [!include[](includes/3-microsoft-security-copilot-rise.md)]

learn-pr/wwl-azure/secure-sap-microsoft-cloud/4-microsoft-sentinel-security-rise.yml

@@ -4,10 +4,10 @@ title: Microsoft Sentinel with SAP RISE
 metadata:
   title: Microsoft Sentinel with SAP RISE
   description: "Microsoft Sentinel with SAP RISE"
-  ms.date: 03/20/2025
+  ms.date: 03/24/2025
   author: wwlpublish
   ms.author: bradj
   ms.topic: unit
-durationInMinutes: 7
+durationInMinutes: 10
 content: |
   [!include[](includes/4-microsoft-sentinel-security-rise.md)]

learn-pr/wwl-azure/secure-sap-microsoft-cloud/5-sentinel-solution-sap-business-technology-platform-overview.yml

@@ -4,10 +4,10 @@ title: Microsoft Sentinel Solution for SAP BTP overview
 metadata:
   title: Microsoft Sentinel Solution for SAP BTP overview
   description: "Microsoft Sentinel Solution for SAP BTP overview"
-  ms.date: 03/20/2025
+  ms.date: 03/24/2025
   author: wwlpublish
   ms.author: bradj
   ms.topic: unit
-durationInMinutes: 9
+durationInMinutes: 14
 content: |
   [!include[](includes/5-sentinel-solution-sap-business-technology-platform-overview.md)]

learn-pr/wwl-azure/secure-sap-microsoft-cloud/6-automatic-response-sentinel-capability.yml

@@ -4,10 +4,10 @@ title: Automatic response with Microsoft Sentinel SOAR capabilities
 metadata:
   title: Automatic response with Microsoft Sentinel SOAR capabilities
   description: "Automatic response with Microsoft Sentinel SOAR capabilities"
-  ms.date: 03/20/2025
+  ms.date: 03/24/2025
   author: wwlpublish
   ms.author: bradj
   ms.topic: unit
-durationInMinutes: 5
+durationInMinutes: 7
 content: |
   [!include[](includes/6-automatic-response-sentinel-capability.md)]

learn-pr/wwl-azure/secure-sap-microsoft-cloud/7-azure-monitor-rise.yml

@@ -4,7 +4,7 @@ title: Azure Monitoring for SAP with SAP RISE
 metadata:
   title: Azure Monitoring for SAP with SAP RISE
   description: "Azure Monitoring for SAP with SAP RISE"
-  ms.date: 03/20/2025
+  ms.date: 03/24/2025
   author: wwlpublish
   ms.author: bradj
   ms.topic: unit

learn-pr/wwl-azure/secure-sap-microsoft-cloud/8-knowledge-check.yml

@@ -4,7 +4,7 @@ title: Knowledge check
 metadata:
   title: Knowledge check
   description: "Knowledge check"
-  ms.date: 03/20/2025
+  ms.date: 03/24/2025
   author: wwlpublish
   ms.author: bradj
   ms.topic: unit

learn-pr/wwl-azure/secure-sap-microsoft-cloud/9-summary.yml

@@ -4,10 +4,10 @@ title: Summary
 metadata:
   title: Summary
   description: "Summary"
-  ms.date: 03/20/2025
+  ms.date: 03/24/2025
   author: wwlpublish
   ms.author: bradj
   ms.topic: unit
-durationInMinutes: 3
+durationInMinutes: 4
 content: |
   [!include[](includes/9-summary.md)]

learn-pr/wwl-azure/secure-sap-microsoft-cloud/includes/3-microsoft-security-copilot-rise.md

@@ -1,8 +1,24 @@
 
 
-[Security Copilot](/copilot/security/microsoft-security-copilot) is a generative AI security product that empowers security and IT professionals respond to cyber threats, process signals, and assess risk exposure at the speed and scale of AI. It has its own [portal](https://securitycopilot.microsoft.com/) and embedded experiences in Microsoft Defender XDR, Microsoft Sentinel, and Intune.
+[Security Copilot](/copilot/security/microsoft-security-copilot) is a generative AI security product that empowers security and IT professionals respond to cyber threats, process signals, and assess risk exposure at the speed and scale of AI. It has its own and embedded experiences in Microsoft Defender XDR, Microsoft Sentinel, and Intune.
 
-It can be used with any data source that Defender XDR and Microsoft Sentinel support, including SAP RISE/ECS. Below shows the stand-alone experience.
+### How does Security Copilot work?
+Security Copilot capabilities can be accessed through a standalone experience and through embedded experiences in other Microsoft security products. The foundation language model and proprietary Microsoft technologies work together in an underlying system that helps increase the efficiency and capabilities of defenders.
+
+- Microsoft security solutions such as Microsoft Defender XDR, Microsoft Sentinel, Microsoft Intune integrate seamlessly with Security Copilot. embedded experiences available in Microsoft security solutions  give access to Security Copilot and prompting capabilities in the context of their work within those solutions.
+- Plugins from Microsoft and third-party security products are a means to extend and integrate services with Security Copilot. Plugins bring more context from event logs, alerts, incidents, and policies from both Microsoft security products and supported third-party solutions such as ServiceNow.
+- Security Copilot also has access to threat intelligence and authoritative content through plugins. Plugins can search across Microsoft Defender Threat Intelligence articles and intel profiles, Microsoft Defender XDR threat analytics reports, and vulnerability disclosure publications, among others.
+
+:::image type="content" source="../media/security-copilot-diagram.png" alt-text="Image of how Security Copilot works with other products.":::
+
+Here's an explanation of how Security Copilot works:
+
+- User prompts from security products are sent to Security Copilot.
+- Security Copilot then preprocesses the input prompt through an approach called grounding, which improves the specificity of the prompt to help you get answers that are relevant and actionable to your prompt. Security Copilot accesses plugins for preprocessing, then sends the modified prompt to the language model.
+- Security Copilot takes the response from the language model and post-processes it. This post-processing includes accessing plugins to gain contextualized information.
+- Security Copilot returns the response, where the user can review and assess the response.
+
+Security Copilot can be used with any data source that Defender XDR and Microsoft Sentinel support, including SAP RISE/ECS. Below shows the stand-alone experience.
 
 :::image type="content" source="../media/sap-rise-security-copilot.png" alt-text="Screenshot of Security Copilot experience with SAP RISE/ECS incidents.":::