Empowering the SOC - Security Copilot and the Rise of Agentic Defense

Explore how Microsoft Security Copilot is transforming Security Operations Centers (SOCs) through agentic AI-driven defense in this 46-minute conference talk from Microsoft Ignite 2025. Learn about the evolution from assistive AI to autonomous agentic defense systems and discover how modern SOCs are becoming AI-powered operations that deliver measurable security outcomes. Examine Microsoft's integrated security platform including Sentinel, Defender, and Copilot, and witness real-world demonstrations of Copilot's investigation capabilities, session memory, and automated note creation. Discover the newly available Phishing Triage Agent and the Threat Intelligence Briefing Agent that provides tailored daily security insights. See how agents execute queries and summarize results in natural language, making complex security data more accessible to analysts. Understand the Security Compute Unit (SCU) pricing structure and the transition from hourly to monthly allocation models for greater flexibility. Gain insights into how AI agents are closing the gap between threat detection and prevention, empowering security analysts to turn intelligence into actionable defense strategies across the complete SOC lifecycle.