Agent tasks: Threat actor activity monitoring, Vulnerability analysis, Threat intelligence correlation, Contextual risk assessment, Threat briefing generation, Situational awareness reporting, Executive summary creation.

Agent workflow: Collects threat intelligence from internal and external sources → Correlates vulnerabilities and signals from Defender products → Dynamically determines relevant threat intelligence to prioritize → Translates technical data into contextualized insights → Generates a briefing report → Delivers report to analysts, managers, and CISOs

Input: Microsoft Security Copilot platform, Microsoft Vulnerability Management data, Defender External Attack Surface Management data (optional),

Output: Customized threat intelligence briefing report, Relevant threat summaries, Technical vulnerability analysis, Contextual risk insights by industry/region, Organizational impact assessments, Briefing history in agent activity log, Transparency view of agent workflow steps, Email notifications with reports

Threat Intelligence Briefing Agent (Preview)Microsoft Security

Threat Intelligence Briefing Agent (Preview)

Microsoft Security

Threat Intelligence Briefing Agent (Preview)

Microsoft Security

Threat Intelligence Briefing Agent (Preview)
Microsoft Security