Security Copilot previews an analyst-led workflow

Microsoft introduced Security Copilot on 28 March in private preview, combining GPT-4 with its security-specific system.

Photo: efes, 2015. Original photograph via Wikimedia Commons. CC0 1.0. Recompressed; responsive crops. Historical premises, not launch imagery; no endorsement implied.

The announced workflow starts with an analyst’s prompt and produces investigation guidance, summaries and recommended responses. Microsoft also describes user feedback and warns that generated answers can be mistaken.

A separate same-day announcement assigns automatic removal of unsafe Teams messages to Defender for Office 365, with that product’s licensing requirement.

Read together, these records put an important boundary around the launch: an assistant recommending a response and an existing security product taking an automated action are different capabilities. Teams assessing the preview need to establish which connected product supplies the evidence and which executes a response.