Ever wondered how AI can create content, answer questions, and assist with tasks? This module introduces you to the world of generative AI and agents.
By the end of this module, you'll be able to:
- Describe core concepts of generative AI.
- Explain how large language models (LLMs) work.
- Consider how to create effective prompts for LLMs.
- Describe core concepts of agents and agentic AI solutions.
Describe Microsoft Security Copilot.
By the end of this module, you are able to:
- Describe what Microsoft Security Copilot is.
- Describe the terminology of Microsoft Security Copilot.
- Describe how Microsoft Security Copilot processes prompt requests.
- Describe the elements of an effective prompt
- Describe how to enable Microsoft Security Copilot.
Describe the core features of Microsoft Security Copilot.
By the end of this module, you're able to:
- Describe the features available in the standalone Copilot experience.
- Describe the plugins available in Copilot.
- Describe custom promptbooks.
- Describe knowledge base connections.
Microsoft Security Copilot is accessible directly from some Microsoft security products. This is referred to the embedded experience. Learn about the scenarios supported by the Copilot embedded experience in Microsoft’s security solutions.
By the end of this module, you're able to:
- Describe Copilot in Microsoft Defender XDR.
- Describe Copilot in Microsoft Purview.
- Describe Copilot in Microsoft Entra.
- Describe Copilot in Microsoft Intune.
- Describe Copilot in Microsoft Defender for Cloud.
Explore use cases of Microsoft Security Copilot in the standalone and embedded experiences through interactive guides.
After completing this module, you'll be able to:
- Configure owner settings in Microsoft Security Copilot.
- Use prompts and promptbooks to investigate security scenarios.
- Create a custom promptbook to streamline repeatable investigation workflows.
- Use Security Copilot in Microsoft Purview to investigate data protection activity, insider risks, DLP alerts, and unlabeled sensitive content.
- Use Security Copilot in Microsoft Defender XDR to investigate security incidents and analyze artifacts.
- Explore and create agents in Security Copilot.
- Review Conditional Access Optimization Agent activity and suggestions.

Syllabus

Introduction to generative AI and agents
- Introduction
- Large language models (LLMs)
- Prompts
- AI agents
- Exercise - Explore generative AI
- Module assessment
- Summary
Describe Microsoft Security Copilot
- Introduction
- Get acquainted with Microsoft Security Copilot
- Describe Microsoft Security Copilot terminology
- Describe how Microsoft Security Copilot processes prompt requests
- Describe the elements of an effective prompt
- Describe how to enable Microsoft Security Copilot
- Module assessment
- Summary and resources
Describe the core features of Microsoft Security Copilot
- Introduction
- Describe the features available in the standalone experience of Microsoft Security Copilot
- Describe the features available in a session of the standalone experience
- Describe workspaces
- Describe Security Copilot plugins
- Describe custom promptbooks
- Describe knowledge base connections
- Module assessment
- Summary and resources
Describe the embedded experiences of Microsoft Security Copilot
- Introduction
- Describe Copilot in Microsoft Defender XDR
- Copilot in Microsoft Purview
- Copilot in Microsoft Entra
- Copilot in Microsoft Intune
- Copilot in Microsoft Defender for Cloud
- Module assessment
- Summary and resources
Experience Security Copilot through guided simulations
- Introduction
- Explore owner settings in Security Copilot
- Use prompts and promptbooks in Security Copilot
- Create a custom promptbook in Security Copilot
- Investigate data protection activity in Microsoft Purview
- Investigate insider risks and compliance in Microsoft Purview
- Investigate security incidents in Microsoft Defender XDR
- Explore and create an agent in Security Copilot
- Explore the Conditional Access Optimization Agent
- Module assessment
- Summary