{"id":132087,"date":"2023-11-08T09:00:00","date_gmt":"2023-11-08T17:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=132087"},"modified":"2025-01-15T06:19:01","modified_gmt":"2025-01-15T14:19:01","slug":"insights-from-microsoft-security-copilot-early-adopters","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/11\/08\/insights-from-microsoft-security-copilot-early-adopters\/","title":{"rendered":"Insights from Microsoft Security Copilot early adopters"},"content":{"rendered":"\n

To understand why customers are adopting generative AI solutions like Microsoft Security Copilot,<\/a> we have to go back to the cyberthreat landscape\u2014which continues to get more challenging. Organizations are facing a surge in cyberattacks while also dealing with a global shortage of security talent. In only the past 12 months, Microsoft has seen password attacks more than triple to more than 4,000 per second.1<\/sup> And, if an organization falls victim to a phishing attack, it now only takes an attacker an average of 72 minutes to access private data. Add on the global shortage of 3.4 million skilled cybersecurity experts and many organizations are left feeling vulnerable and under protected.2<\/sup><\/p>\n\n\n\n

Generative AI: The game changer in cybersecurity<\/h2>\n\n\n\n

To tip the scales in favor of safety and security, we need to augment the work of our skilled security professionals. Human ingenuity and expertise will always be irreplaceable components of defense, but we need technology to expand the skill sets of our security teams with the lightning-fast processing speeds, rapid pattern recognition, and continual improvements of generative AI. By detecting hidden patterns and sharing informed responses back at machine speed\u2014while always adhering to the latest, most advanced security practices\u2014generative AI can help us regain an advantage against cybercriminals. AI provides near real-time visibility and context for potential threats, helping us investigate and mitigate threats faster. When we utilize solutions that incorporate generative AI, teams can become more effective and efficient, using natural language prompts rather than complex queries, and collaborate more easily with shared skills. Early preview customers of Microsoft Security Copilot agree.<\/p>\n\n\n

\n\t
\n\t\t
\n\n\t\t\t\n\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t

Microsoft Security Copilot<\/h2>\n\n\t\t\t\t\t
\n\t\t\t\t\t\t

Powerful new capabilities, new integrations, and\u00a0industry-leading generative\u00a0AI\u2014now available in early access.<\/p>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tLearn more<\/span>\n\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\"Enterprise\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n<\/div>\n\n\n\n

Early customers report Microsoft Security Copilot saves time<\/h2>\n\n\n\n

Greg Peterson, Senior Director of Security, Technology, and Operations at Avanade, shares the challenges his organization faces today and how Microsoft Security Copilot can help by empowering senior analysts, junior analysts, and even interns to get ahead of potential security threats.<\/p>\n\n\n\n

\n\t\n
\n\t\n\t\t
\n\t\t\t<\/iframe>\n\t\t<\/div>\n\t<\/div>\n\t<\/figure>\n\n<\/div>\n\n\n\n

\u201cFor senior analysts, Security Copilot might give them a different and new way to look at a problem. But for our more junior analysts, it\u2019s really going to help bridge the skills gap\u2014especially as we build more curated prompt playbooks and learn how to use those tools,\u201d Peterson explained.  <\/p>\n\n\n\n

Beyond generative AI, our end-to-end security, identity, compliance, and privacy solutions allow us to cover more cyberthreat vectors and deliver more value with a coordinated, comprehensive customer experience across the entire digital estate. By embracing generative AI and simplifying otherwise complex toolsets, we help organizations gain an advantage against cyberattackers and allow them to refocus precious security resources on more important business tasks, like innovation. In our preview of Microsoft Security Copilot, customers reported saving up to 40 percent of their security analysts\u2019 time<\/strong> on foundational tasks like investigation and response, threat hunting, and threat intelligence assessments.3<\/sup> And on more mundane tasks like preparing reports or troubleshooting minor issues, Security Copilot delivered gains in efficiency up to and above 60 percent<\/strong>.3<\/sup> But the most promising data coming out of our early research is not the numbers, but what customers can do with these gains in efficiency and time saved.<\/p>\n\n\n\n

Upskilling with Security Copilot: Empowering junior security analysts<\/h2>\n\n\n\n

Our preview research data suggests that Security Copilot can enable junior security analysts, including Tier 1 and 2 team members, to take on tasks that were previously reserved for Tier 3 and 4 security professionals. To test this hypothesis, we asked our own Microsoft security operations center (SOC) analysts to evaluate the output of Security Copilot on tasks like incident summarization, script analysis, incident reporting, query assistance, and guided response. The results were impressive: experienced practitioners equated Security Copilot outputs to those of mid- to expert-level human analysts, particularly for tasks such as incident summarization, script analysis, and query assistance. This means that any analyst can use natural language prompts to initiate and perform tasks that they may not have a lot of experience or expertise in, and the outputs of Security Copilot will help them both accomplish the right results immediately and, more importantly, help them develop those critical skills for long-term use. With Security Copilot, your team can accomplish a lot more with the resources you already have.<\/p>\n\n\n\n

The impact of Security Copilot on your organization<\/h2>\n\n\n\n

Microsoft Security Copilot is more than just an AI-powered, large language model working with your security technology. It builds on the latest innovation in large language models and uniquely goes beyond that, harnessing the foundational power of Microsoft\u2019s security expertise, global threat intelligence, and technologies to deliver massive efficiency gains for the most vital security use cases. When you submit a prompt, Security Copilot improves it with the security-specific system built on deep Microsoft Security knowledge and continuous learning. Your prompt is enriched with the end-to-end Microsoft Security product portfolio and fresh threat intelligence informed by Microsoft\u2019s 65 trillion signals and human intelligence.1<\/sup> Finally, it translates the response according to your prompt instructions, taking the form of text or code that helps you see the full context of an incident, the impact, and the next steps you should take to deepen understanding or to take direct action for remediation and defense hardening.<\/p>\n\n\n

\"Flow<\/figure>\n\n\n\n

Security Copilot is an AI assistant for daily operations in security and IT that can help organizations:<\/h3>\n\n\n\n