- Home
- IT Courses
- MS-SC5006: Enhance security operations by using Microsoft Security Copilot
MS-SC5006: Enhance security operations by using Microsoft Security Copilot
Course Code: MS-SC5006
Explore the transformative power of AI in security with Microsoft Security Copilot. This course starts by introducing you to the fundamental concepts of generative AI. The course then delves into the cutting-edge AI functionality of Microsoft Security Copilot that empowers analysts to respond to threats quickly, process signals at machine speed, and assess risk exposure more quickly than may otherwise be possible. Lastly, the course guides the learner through a series of simulation-based exercises that mimic real-world situations.
This course is targeted at security professionals interested in getting started with Microsoft Security Copilot, including security analysts, security admins, and SOC managers.
Before attending this course, delegates must have:
- Working knowledge of security operations and incident response
- Working knowledge of Microsoft security products and services
After completing this course, delegates will be able to:
- Understand machine learning, computer vision, natural language processing, document intelligence, and knowledge mining.
- Learn about generative AI and its challenges and risks.
- Understand responsible AI practices.
- Understand the role of copilots and how to use them effectively.
- Explore considerations for Copilot prompts and extending/developing copilots.
- Plan and develop responsible generative AI solutions.
- Identify, measure, and mitigate potential harms.
- Operate a responsible generative AI solution.
- Get acquainted with Microsoft Copilot for Security and its terminology.
- Learn how to enable Microsoft Copilot for Security.
- Explore the features available in the standalone experience.
- Learn about Microsoft and non-Microsoft plugins, custom promptbooks, and knowledge base connections.
- Understand how Microsoft Copilot integrates with Microsoft Defender XDR, Microsoft Purview, Microsoft Entra, Microsoft Intune, and Microsoft Defender for Cloud.
- Experience the first run and standalone experiences.
- Configure plugins and explore file uploads as a knowledge base.
- Create custom promptbooks and explore capabilities in various Microsoft security products.
There is no Associated Certification or Exam for this course.
Modules
In this module, you explore the way in which language models enable AI applications and services to generate original content based on natural language input. You also learn how generative AI enables the creation of copilots that can assist humans in creative tasks.
Lessons
- Introduction to AI.
- What is generative AI?
- What are language models?
- Using language models
- What are copilots?
- Microsoft Copilot
- Considerations for Copilot prompts.
- Extending and developing copilots.
- Exercise – Explore Microsoft Copilot.
- Knowledge check.
- Summary
By the end of this module, you’ll be able to:
- Understand generative AI's place in the development of artificial intelligence.
- Understand language models and their role in intelligent applications.
- Describe examples of copilots and good prompts.
Get acquainted with Microsoft Security Copilot. You are introduced to some basic terminology, how Microsoft Security Copilot processes prompts, the elements of an effective prompt, and how to enable the solution.
Lessons
- Introduction.
- Get acquainted with Microsoft Security Copilot.
- Describe Microsoft Security Copilot terminology.
- Describe how Microsoft Security Copilot processes prompt requests.
- Describe the elements of an effective prompt.
- Describe how to enable Microsoft Security Copilot.
- Knowledge check.
- Summary and resources.
By the end of this module, you’ll be able to:
- Describe what Microsoft Security Copilot is.
- Describe the terminology of Microsoft Security Copilot.
- Describe how Microsoft Security Copilot processes prompt requests.
- Describe the elements of an effective prompt
- Describe how to enable Microsoft Security Copilot.
Microsoft Security Copilot has a rich set of features. Learn about available plugins, promptbooks, the ways you can export and share information from Copilot, and much more.
Lessons
- Introduction
- Describe the features available in the standalone experience of Microsoft Security Copilot
- Describe the features available in a session of the standalone experience
- Describe the Microsoft plugins available in Microsoft Security Copilot
- Describe the non-Microsoft plugins supported by Microsoft Security Copilot
- Describe custom promptbooks
- Describe knowledge base connections
- Knowledge check
- Summary and resources
By the end of this module, you’ll be able to:
- Describe the features available in the standalone Copilot experience.
- Describe the plugins available in Copilot.
- Describe custom promptbooks.
- Describe knowledge base connections.
Microsoft Security Copilot is accessible directly from some Microsoft security products. This is referred to as the embedded experience. Learn about the scenarios supported by the Copilot embedded experience in Microsoft’s security solutions.
Lessons
- Introduction
- Describe Copilot in Microsoft Defender XDR
- Copilot in Microsoft Purview
- Copilot in Microsoft Entra
- Copilot in Microsoft Intune
- Copilot in Microsoft Defender for Cloud (Preview)
- Knowledge check
- Summary and resources
By the end of this module, you’ll be able to:
- Describe Copilot in Microsoft Defender XDR.
- Describe Copilot in Microsoft Purview.
- Describe Copilot in Microsoft Entra.
- Describe Copilot in Microsoft Intune.
- Describe Copilot in Microsoft Defender for Cloud.
Automate threat detection and response with Microsoft Security Copilot agents—AI-powered tools that streamline cybersecurity operations, reduce manual workloads, and scale protection across your digital environment.
Lessons
- Introduction
- Describe Microsoft Security Copilot agents
- Describe the Threat Intelligence Briefing Agent
- Explore the Threat Intelligence Briefing Agent
- Describe the Conditional Access Optimization Agent
- Explore the Conditional Access Optimization Agent
- Describe the Phishing Triage Agent
- Module assessment
- Summary and resources
By the end of this module, you're able to:
- Describe the role and functionality of Microsoft Security Copilot agents in automating security workflows.
- Describe the Threat Intelligence Briefing Agent.
- Describe the Conditional Access Optimization Agent.
- Describe the Phishing Triage agent.
Explore use cases of Microsoft Security Copilot in the standalone and embedded experiences, through lab-like exercises.
Lessons
- Introduction
- Explore the first run experience
- Explore the standalone experience
- Configure the Microsoft Sentinel plugin
- Enable a custom plugin
- Explore file uploads as a knowledge base
- Create a custom promptbook
- Explore the capabilities of Copilot in Microsoft Defender XDR
- Explore the capabilities of Copilot in Microsoft Purview
- Knowledge check
- Summary and resources
By the end of this module, you’ll be able to:
- "Set up Microsoft Security Copilot."
- "Work with sources in Copilot."
- "Create a custom promptbook."
- "Use the capabilities of Copilot in Defender XDR."
- "Use the capabilities of Copilot in Microsoft Purview."