Microsoft Security
SC-5006 Enhance security operations by using Microsoft Security Copilot
Bring generative AI into your security operations.
1 dayIntermediate6 modulesSC-5006
About this course
Bring generative AI into your security operations. In one day you will learn how language models work, how Microsoft Security Copilot processes prompts, and how to use its standalone workspaces, its embedded experiences in Defender XDR, Purview and Entra, and agents such as the Threat Intelligence Briefing Agent.
Curriculum
6 modules
- What is generative AI?
- How do language models work?
- Understand how transformers advance language models
- Understand differences in language models
- Improve prompt results
- Create responsible generative AI solutions
- Module assessment
- Get acquainted with Microsoft Security Copilot
- Describe Microsoft Security Copilot terminology
- Describe how Microsoft Security Copilot processes prompt requests
- Describe the elements of an effective prompt
- Describe how to enable Microsoft Security Copilot
- Module assessment
- Describe the features available in the standalone experience of Microsoft Security Copilot
- Describe the features available in a session of the standalone experience
- Describe workspaces
- Describe the Microsoft plugins available in Microsoft Security Copilot
- Describe the non-Microsoft plugins supported by Microsoft Security Copilot
- Describe custom promptbooks
- Describe knowledge base connections
- Module assessment
- Describe Copilot in Microsoft Defender XDR
- Copilot in Microsoft Purview
- Copilot in Microsoft Entra
- Copilot in Microsoft Intune
- Copilot in Microsoft Defender for Cloud (Preview)
- Module assessment
- Describe Microsoft Security Copilot agents
- Describe the Threat Intelligence Briefing Agent
- Explore the Threat Intelligence Briefing Agent
- Describe the Conditional Access Optimization Agent
- Explore the Conditional Access Optimization Agent
- Describe the Phishing Triage Agent
- Module assessment
- Explore the first run experience
- Explore the standalone experience
- Explore Security Copilot workspaces
- Configure the Microsoft Sentinel plugin
- Enable a custom plugin
- Explore file uploads as a knowledge base
- Create a custom promptbook
- Explore the capabilities of Copilot in Microsoft Defender XDR
- Explore the capabilities of Copilot in Microsoft Purview
- Explore the capabilities of Copilot in Microsoft Entra
- Module assessment
Who it's for
Security analysts and administrators who know Microsoft security products and handle incident response.
Before you start
- Working knowledge of security operations and incident response
- Working knowledge of Microsoft security products and services
Related courses
More in Microsoft Security →FoundationSC-900T00
Microsoft Security, SC-900T00 Introduction to Microsoft Security, Compliance, and Identity, and Identity Fundamentals: SC-900 Exam Prep
Microsoft Security
View course →AdvancedSC-100T00
SC-100T00 Microsoft Cybersecurity Architect
Microsoft Security
View course →IntermediateSC-200
SC-200: Defend Against Cyberthreats with Microsoft's Security Operations Platform
Microsoft Security
View course →IntermediateSC-300T00
SC-300T00 Microsoft Identity and Access Administrator
Microsoft Security
View course →IntermediateSC-401
SC-401 Protect sensitive information with Microsoft Purview in the AI era
Microsoft Security
View course →IntermediateSC-5001
SC-5001 Configure SIEM security operations using Microsoft Sentinel
Microsoft Security
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.