Create effective prompts in Microsoft Security Copilot - Microsoft Security Copilot教程

- [instructor] Microsoft Security Copilot is powered by generative AI. To help generate better responses, we need to create effective prompts. What is the prompt? Basically, it's an instruction you send to generative AI. Unlike programming languages, such as Java or Python, we use natural language to create a prompt. For example, you can enter, "Suggest a seven-day California travel plan." Then based on your prompt, generative AI applications, such as ChatGPT, will generate the response. Microsoft Security Copilot is a generative AI application specialized in security, so your prompts should be security related. If you ask for a recommendation on your next vacation, Security Copilot won't help with it. The effectiveness of your prompts directly affects AI-generated responses. For example, let's compare two prompts. "List all incidents," versus, "Can you list the incidents from Microsoft Defender XDR within the last 30 days? It's for my status update with managers. Please show results in the table with name, severity, status, and owner." Which prompt do you think will better help get what we want from Security Copilot? Did you select the second one? Then you're right. How can we create effective prompts? Actually, we just need to ask five basic questions: who, what, why, how, and where? Specifically, who means the role we want AI to play. Security. Copilot has a predefined role as a knowledgeable security analyst, so we don't need to worry about this question, and we can simply call Microsoft Security Copilot, "You." What means the goal we want to achieve with AI. For example, list the incidents within the last 30 days. Why means the context of our request. For example, the reason for finding incidents is for my status update with managers. How means how Copilot should format results to meet our expectations. For example, show results in the table with name, severity, status, and owner. And where means the source of our plugins or data. For example, from Microsoft Defender XDR to find incidents. Now, let's put these essential elements together, we'll get an effective prompt. In Microsoft Security Pilot, you have three ways to provide prompts. You can write to your prompts from scratch, use a system capability, it's a prebuilt function or skill provided by one of your plugins, or use a prompt book. It's a collection of prompts working together to perform a task. To learn more about applying prompting to common security tasks, check out my in-depth course on LinkedIn Learning, Microsoft Security Copilot: Prompts and Promptbooks. Let's do a quick demo of using prompts in Microsoft Security Copilot. Open the menu, then click My sessions. Click New session. In the prompt bar, enter a simple prompt, "List all incidents." Security Copilot generated the response with many incidents. It looks okay, but it's not tailored to my status report. Now I will enter a prompt with my specific expectations, "Can you list the incidents from Microsoft Defender XDR within the last 30 days? It's for my status update with managers. Please show results in the table with name, severity, status, and owner." Security Copilot found three incidents. Expand the output message. Here's a table with the required information for my status update. I can then click Export to Excel. Open the Excel file, so I can use this information for my report. This prompt is more effective.