O'Reilly Archive: Introduction to Microsoft Copilot for Security

Level: Beginner to Intermediate. Theme: How AI can help increase productivity and improve security posture.

A demo driven session on Microsoft Copilot for Security, covering how it leverages AI to enhance the efficiency of Security Operations Centers (SOC). Tailored for those new to Microsoft Copilot for Security, the course is a quick ramp up covering both standalone and embedded modes, plus plugins and prompt engineering for end to end security operations. Includes Responsible AI practices and the evolving impact of AI on cybersecurity roles and responsibilities.

Course outcomes

• Understand the core capabilities of Microsoft Copilot for Security
• Identify key use cases where Copilot for Security applies AI to common cybersecurity challenges
• Operate Copilot for Security in standalone and embedded modes, using plugins and prompt books for end to end SecOps tasks
• Review Responsible AI practices and the impact of AI on cybersecurity roles and job functions

This course is for you if

• You’re a security professional
• You’re a CISO, CTO, or other security leader
• You work with Microsoft security tools and services
• You want to learn how Microsoft Copilot for Security can fully optimize your end to end security workflow

Prerequisites

• Fundamental knowledge of cybersecurity areas such as threat hunting and incident response (no prior AI knowledge required)

Schedule

Getting started with AI in security: key roles and challenges (25 minutes). How AI enhances security practices and drives impactful use cases. The role of generative AI in boosting SOC operational efficiency. Copilots versus agents, and how copilots act as supportive tools in complex security workflows. AI challenges including transparency, trust, and responsible data use. Responsible AI practices for ethical, accountable, and unbiased AI implementation. Interactive Q&A.

Understanding Microsoft Copilot for Security (30 minutes). Overview and capabilities. Standalone versus embedded modes. Real world use cases. Interactive Q&A.

Working with Microsoft Copilot for Security (55 minutes). Live demo of a full standalone experience including incident handling and SOC tasks. Walkthrough of embedded experiences across Microsoft security tools (Defender XDR, Sentinel, Entra, Intune, Purview, etc). Plugins to extend Copilot’s functionality. Using prompt books for optimized responses and task handling. Interactive Q&A.

Wrap up and next steps (5 minutes). Next steps to continue building AI and security knowledge. Additional learning resources. Certification opportunities.