Enhance security operations by using Microsoft Security Copilot (SC-5006)
Learn how Microsoft Security Copilot uses generative AI to help security teams process signals, assess risk, and respond to threats through practical exercises.
Register or Request Training
- Private class for your team
- Live expert instructor
- Online or on‑location
- Customizable agenda
- Proposal responses same day as request
Course Overview
Explore how generative AI and Microsoft Security Copilot can enhance security operations. Learn how Copilot helps analysts process security signals, assess risk exposure, and respond to threats more quickly across standalone and embedded experiences.
Designed for security analysts, security administrators, and SOC managers, this course covers Copilot features, plugins, promptbooks, agents, knowledge bases, and integrations with Microsoft security solutions. Simulation-based exercises provide opportunities to explore practical security use cases.
Course Benefits
- Explain foundational generative AI concepts, including language models, transformers, prompts, and responsible AI.
- Describe how Microsoft Security Copilot processes requests and identify the elements of an effective prompt.
- Use core Security Copilot features, including workspaces, plugins, promptbooks, and knowledge base connections.
- Identify Security Copilot capabilities embedded in Microsoft Defender XDR, Microsoft Purview, Microsoft Entra, Microsoft Intune, and Microsoft Defender for Cloud.
- Describe Security Copilot agents for threat intelligence, conditional access optimization, and phishing triage.
- Explore standalone and embedded Security Copilot use cases through simulation-based exercises.
Delivery Methods
Live expert-led online training from anywhere. Guaranteed to run .
Delivered for your team at your site or online.
Microsoft Certified Partner
Webucator is a Microsoft Certified Partner. This class uses official Microsoft courseware and will be delivered by a Microsoft Certified Trainer (MCT).

Course Outline
- Introduction to Generative AI Concepts
- What is generative AI?
- How language models work
- How transformers advance language models
- Differences in language models
- Improving prompt results
- Creating responsible generative AI solutions
- Module assessment
- Describe Microsoft Security Copilot
- Get acquainted with Microsoft Security Copilot
- Microsoft Security Copilot terminology
- How Microsoft Security Copilot processes prompt requests
- Elements of an effective prompt
- How to enable Microsoft Security Copilot
- Module assessment
- Describe the Core Features of Microsoft Security Copilot
- Features available in the standalone experience
- Features available in a standalone session
- Workspaces
- Microsoft plugins
- Supported non-Microsoft plugins
- Custom promptbooks
- Knowledge base connections
- Module assessment
- Describe the Embedded Experiences of Microsoft Security Copilot
- Copilot in Microsoft Defender XDR
- Copilot in Microsoft Purview
- Copilot in Microsoft Entra
- Copilot in Microsoft Intune
- Copilot in Microsoft Defender for Cloud (Preview)
- Module assessment
- Describe Microsoft Security Copilot Agents
- Microsoft Security Copilot agents
- Threat Intelligence Briefing Agent
- Explore the Threat Intelligence Briefing Agent
- Conditional Access Optimization Agent
- Explore the Conditional Access Optimization Agent
- Phishing Triage Agent
- Module assessment
- Explore Use Cases of Microsoft Security Copilot
- Explore the first-run experience
- Explore the standalone experience
- Explore Security Copilot workspaces
- Configure the Microsoft Sentinel plugin
- Enable a custom plugin
- Explore file uploads as a knowledge base
- Create a custom promptbook
- Explore Copilot capabilities in Microsoft Defender XDR
- Explore Copilot capabilities in Microsoft Purview
- Explore Copilot capabilities in Microsoft Entra
- Module assessment
Class Materials
Each student receives a comprehensive set of materials, including course notes and all class examples.
Class Prerequisites
Experience in the following is required for this Microsoft Security class:
- Working knowledge of security operations and incident response
- Working knowledge of Microsoft security products and services
Prerequisite Courses
Courses that can help you meet these prerequisites:
Have questions about this course?
We can help with curriculum details, delivery options, pricing, or anything else. Reach out and we’ll point you in the right direction.