microsoft partner logo color
8781  Reviews star_rate star_rate star_rate star_rate star_half

Enhance security operations by using Microsoft Security Copilot

Explore the transformative power of AI in security with Microsoft Security Copilot. This course starts by introducing you to the fundamental concepts of generative AI. The course then delves into the...

Read More
$675 USD
Duration 1 day
Course Code SC-5006
Available Formats Classroom

Overview

Course Description

Explore the transformative power of AI in security with Microsoft Security Copilot. This course starts by introducing you to the fundamental concepts of generative AI. The course then delves into the cutting-edge AI functionality of Microsoft Security Copilot that empowers analysts to respond to threats quickly, process signals at machine speed, and assess risk exposure more quickly than may otherwise be possible. Lastly, the course guides the learner through a series of simulation-based exercises that mimic real-world situations.

Audience Profile

This course is targeted to security professionals interested in getting started with Microsoft Security Copilot, including security analysts, security admins, and SOC managers.   The person taking this course is looking to familiarize themselves with the functionality of Microsoft Security Copilot in both the standalone and embedded experiences.  They should have working knowledge of security operations and incident response, experience with Microsoft security products and services, and is interested in learning how Microsoft Security Copilot, an AI-powered security analysis tool, can help them process security signals and respond to threats more quickly.

Prerequisites

  • Working knowledge of security operations and incident response
  • Working knowledge of Microsoft security products and services

Course Details

Course Details

Outline

  • Introduction to generative AI and agents
    • Large language models (LLMs)
    • Prompts
    • AI agents
    • Exercise - Explore generative AI
    • Module assessment
  • Describe Microsoft Security Copilot
    • Get acquainted with Microsoft Security Copilot
    • Describe Microsoft Security Copilot terminology
    • Describe how Microsoft Security Copilot processes prompt requests
    • Describe the elements of an effective prompt
    • Describe how to enable Microsoft Security Copilot
    • Module assessment
    • Summary and resources
  • Describe the core features of Microsoft Security Copilot
    • Describe the features available in the standalone experience of Microsoft Security Copilot
    • Describe the features available in a session of the standalone experience
    • Describe workspaces
    • Describe Security Copilot plugins
    • Describe custom promptbooks
    • Describe knowledge base connections
    • Module assessment
    • Summary and resources
  • Describe the embedded experiences of Microsoft Security Copilot
    • Describe Copilot in Microsoft Defender XDR
    • Copilot in Microsoft Purview
    • Copilot in Microsoft Entra
    • Copilot in Microsoft Intune
    • Copilot in Microsoft Defender for Cloud
    • Module assessment
    • Summary and resources
  • Describe Microsoft Security Copilot agents
    • Describe Microsoft Security Copilot agents
    • Understand agent identities and permissions
    • Describe the Security Copilot agents in Microsoft Entra
    • Describe the Security Copilot agents in Microsoft Defender
    • Describe the Security Copilot agents in Microsoft Purview
    • Describe the Security Copilot agents in Microsoft Intune
    • Describe the agents in the Security Copilot standalone experience
    • Build your own agents
    • Module assessment
    • Summary and resources
  • Experience Security Copilot through guided simulations
    • Explore owner settings in Security Copilot
    • Use prompts and promptbooks in Security Copilot
    • Create a custom promptbook in Security Copilot
    • Investigate data protection activity in Microsoft Purview
    • Investigate insider risks and compliance in Microsoft Purview
    • Investigate security incidents in Microsoft Defender XDR
    • Explore and create an agent in Security Copilot
    • Explore the Conditional Access Optimization Agent
    • Module assessment

Schedule

FAQ

How do I get a Microsoft exam voucher?

Pearson Vue Exam vouchers can be requested and ordered with your course purchase.

  • Vouchers are non-refundable and non-returnable. Vouchers expire 12 months from the date they are issued unless otherwise specified in the terms and conditions.
  • Voucher expiration dates cannot be extended. The exam must be taken by the expiration date printed on the voucher.

Do Microsoft courses come with post lab access?

Most Microsoft official courses will include post-lab access ranging from 30 to 180 calendar days after instructor led course delivery. A lab training key in class will be provided that can be leveraged to continue connecting to a remote lab environment for the individual course attendee.

Does the course schedule include a Lunchbreak?

Lunch is normally an hour-long after 3-3.5 hours of the class day.

What languages are used to deliver training?

Microsoft courses are conducted in English unless otherwise specified.

Reviews

Class was very informative, although one lab didnt but will try again later

It was very informative and covered all the required materials along with handson labs for practice.

my experince was great from the day i regetered to the actuall day of the class.

The instructor was thorough and they also provided hands-on demonstrations with labs.

Sean is the very good instructor. I would like to take his class again in the future.