Copilot Private

Enhance security operations by using Microsoft Security Copilot (SC-5006)

Course Length: 1 day

Explore the transformative power of AI in security with Microsoft Security Copilot.

Enhance security operations by using Microsoft Security Copilot

Register or Request Training

  • Private class for your team
  • Live expert instructor
  • Online or on‑location
  • Customizable agenda
  • Proposal turnaround within 1–2 business days

Course Overview

Explore the transformative power of AI in security with Microsoft Security Copilot. This course starts by introducing you to the fundamental concepts of generative AI. The course then delves into the cutting-edge AI functionality of Microsoft Security Copilot that empowers analysts to respond to threats quickly, process signals at machine speed, and assess risk exposure more quickly than may otherwise be possible. Lastly, the course guides the learner through a series of simulation-based exercises that mimic real-world situations.

This course is targeted to security professionals interested in getting started with Microsoft Security Copilot, including security analysts, security admins, and SOC managers. The person taking this course is looking to familiarize themselves with the functionality of Microsoft Security Copilot in both the standalone and embedded experiences. They should have working knowledge of security operations and incident response, experience with Microsoft security products and services, and is interested in learning how Microsoft Security Copilot, an AI-powered security analysis tool, can help them process security signals and respond to threats more quickly.

Course Benefits

  • Learn about Microsoft Security Copilot, an AI-powered security analysis tool that enables analysts to process security signals and respond to threats at a machine speed, and the AI concepts upon which it's built.
  • Generative AI powers applications that can create content, answer questions, and assist with tasks. In this module, you'll explore the fundamentals of generative AI, including large language models (LLMs), prompts, and AI agents.
  • Get acquainted with Microsoft Security Copilot. You're introduced to some basic terminology, how Microsoft Security Copilot processes prompts, the elements of an effective prompt, and how to enable the solution.
  • Microsoft Security Copilot has a rich set of features. Learn about available plugins, promptbooks, the ways you can export and share information from Copilot, and much more.
  • Microsoft Security Copilot is accessible directly from some Microsoft security products. This is referred to as the embedded experience. Learn about the scenarios supported by the Copilot embedded experience in Microsoft's security solutions.
  • Automate threat detection and response with Microsoft Security Copilot agent's AI-powered tools that streamline cybersecurity operations, reduce manual workloads, and scale protection across your digital environment.
  • Explore use cases of Microsoft Security Copilot in the standalone and embedded experiences, through lab-like exercises.

Delivery Methods

Private Class
Delivered for your team at your site or online.

Microsoft Certified Partner

Webucator is a Microsoft Certified Partner. This class uses official Microsoft courseware and will be delivered by a Microsoft Certified Trainer (MCT).

Microsoft Certified Partner

Course Outline

  1. Introduction to generative AI and agents
    1. Large language models (LLMs)
    2. Prompts
    3. AI agents
  2. Describe Microsoft Security Copilot
    1. Get acquainted with Microsoft Security Copilot
    2. Describe Microsoft Security Copilot terminology
    3. Describe how Microsoft Security Copilot processes prompt requests
    4. Describe the elements of an effective prompt
    5. Describe how to enable Microsoft Security Copilot
  3. Describe the core features of Microsoft Security Copilot
    1. Describe workspaces
    2. Describe the non-Microsoft plugins supported by Microsoft Security Copilot
    3. Describe custom promptbooks
    4. Describe knowledge base connections
  4. Describe the embedded experiences of Microsoft Security Copilot
    1. Describe Copilot in Microsoft Defender XDR
    2. Copilot in Microsoft Purview
    3. Copilot in Microsoft Entra
    4. Copilot in Microsoft Intune
    5. Copilot in Microsoft Defender for Cloud (Preview)
  5. Describe Microsoft Security Copilot agents
    1. Describe Microsoft Security Copilot agents
    2. Describe the Threat Intelligence Briefing Agent
    3. Explore the Threat Intelligence Briefing Agent
    4. Describe the Conditional Access Optimization Agent
    5. Explore the Conditional Access Optimization Agent
    6. Describe the Phishing Triage Agent
    7. Build your own agents
  6. Explore use cases of Microsoft Security Copilot
    1. Explore the first run experience
    2. Explore the standalone experience
    3. Explore Security Copilot workspaces
    4. Configure the Microsoft Sentinel plugin
    5. Enable a custom plugin
    6. Explore file uploads as a knowledge base
    7. Create a custom promptbook
    8. Explore the capabilities of Copilot in Microsoft Defender XDR
    9. Explore the capabilities of Copilot in Microsoft Purview
    10. Explore the capabilities of Copilot in Microsoft Entra

Class Materials

Each student receives a comprehensive set of materials, including course notes and all class examples.

Class Prerequisites

Experience in the following is required for this Copilot class:

  • Knowledge of security operations and incident response
  • Knowledge of Microsoft security products and services

Have questions about this course?

We can help with curriculum details, delivery options, pricing, or anything else. Reach out and we’ll point you in the right direction.

}