Get started with Microsoft Security Copilot - Microsoft Security Copilot教程

- [Instructor] Let's get started with Microsoft Security Copilot. Open the browser, and enter the URL, securitycopilot.microsoft.com. I will sign in with my Microsoft work account. After signing, I can see the Security Copilot portal. It provides many prompts to try. You can filter prompts by job roles, such as SOC Analyst, IT Administrator, or Identity Administrator. You can also filter prompts by integrated plugins, such as Microsoft Entra, Microsoft Intune, or Microsoft Purview. You can explore some promptbooks. A promptbook is a collection of prompts working together to complete a security task. For example, Vulnerability impact assessment promptbook. This promptbook includes four prompts. The prompt bar is where you interact with the Copilot. You can ask anything about security. For example, if I want to get an overview of recent cyber threats, I can enter, "Summarize recent threat intelligence." Click submit. We will get the response from the Copilot. And it provides some reference links. To see how Security Copilot worked on my request, I can expand the steps completed. First, it chose the plugin, Microsoft Defender Threat Intelligence. Then it to looked up threat intelligence information, and send it to the large language model to process. Finally, it prepared the response, run safety checks, and composed the output message. I can rate the Copilot's response by selecting it looks right, needs improvement, or inappropriate. I can export the response by saving it to a Word document, send an email, or copying it to the clipboard. I can also save this response to a pin board, so I can revisit it later. In addition, I can edit, resubmit, and delete this prompt. Security Copilot keeps a history of my sessions. I can edit the session name at the top. For example, change it to, "Summarize recent cyber threats." Then click Save. Click the menu icon at the top left. I can view all my sessions. Access Promptbook library. Adjust the settings like preferences, data, and privacy. If you have the owner role of Microsoft Security Copilot, you can see additional menu choices for Owner settings, Plugin settings, Role assignment, and Usage Monitoring. Go back to the Home page. You can click the Prompts icon inside the prompt bar for prompt suggestions. You can use promptbooks or you can use system capabilities, which are prebuilt skills. Click See all system capabilities. There are many skills provided by variant security tools. Click the Sources icon in the prompt bar. Here, we can manage plugins. I can set up Copilot access to Microsoft security products, third-party products, public websites, and add your custom plugins. I can also upload files like my security policies, so it will add my organizational knowledge to Security Copilot. Click the question icon at the bottom right of the Home page. We can view Documentation, or click Help to contact support. Now, you should know the general operations of Microsoft Security Copilot. But this portal is not the only place to access Security Copilot. We can also use its embedded experience in many Microsoft security products, like Microsoft Defender XDR. I will show you later in this course.