Agent tasks: Threat actor activity monitoring, Vulnerability analysis, Threat intelligence correlation, Contextual risk assessment, Threat briefing generation, Situational awareness reporting, Executive summary creation.

Agent workflow: Collects threat intelligence from internal and external sources → Correlates vulnerabilities and signals from Defender products → Dynamically determines relevant threat intelligence to prioritize → Translates technical data into contextualized insights → Generates a briefing report → Delivers report to analysts, managers, and CISOs