{"id":58169,"date":"2025-04-24T16:34:42","date_gmt":"2025-04-24T14:34:42","guid":{"rendered":"https:\/\/www.schneider.im\/?p=58169"},"modified":"2025-04-24T16:44:01","modified_gmt":"2025-04-24T14:44:01","slug":"microsoft-security-new-security-agents-available","status":"publish","type":"post","link":"https:\/\/www.schneider.im\/lu\/microsoft-security-new-security-agents-available\/","title":{"rendered":"Microsoft Security: New Security Agents available"},"content":{"rendered":"<p style=\"text-align: justify;\">Coming in <strong>May 2025<\/strong>, <strong>Microsoft will introduce six new agentic solutions<\/strong> within the Microsoft Security Copilot suite in <strong>public preview<\/strong>. These agents are designed to <strong>autonomously handle high-volume security and IT tasks<\/strong>, and integrate seamlessly with existing Microsoft Security solutions.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-58170\" src=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-New-Security-Agents-available.jpg\" alt=\"\" width=\"800\" height=\"450\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-New-Security-Agents-available.jpg 800w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-New-Security-Agents-available-500x281.jpg 500w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-New-Security-Agents-available-150x84.jpg 150w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-New-Security-Agents-available-768x432.jpg 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<h2 style=\"text-align: justify;\"><strong>What is Microsoft Security Copilot?<\/strong><\/h2>\n<p style=\"text-align: justify;\"><strong>Microsoft Security Copilot<\/strong> is a comprehensive <strong>security platform<\/strong> that <strong>integrates various security tools and solutions to provide a unified approach<\/strong> to managing and mitigating security threats. The platform includes <strong>advanced AI-driven agents<\/strong> that help security teams automate and streamline their workflows. The <strong>existing AI-driven agents are now being extended with the following additions<\/strong>:<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>New Security Agents<\/strong><\/h2>\n<h3 style=\"text-align: justify;\">Phishing Triage Agent in Microsoft Defender<\/h3>\n<p style=\"text-align: justify;\">This agent autonomously <strong>triages user-submitted phishing incidents and distinguishes genuine threats from false alarms <\/strong>with great precision. It provides natural language explanations for its decisions and refines its detection capabilities based on your feedback.<\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"aligncenter size-large wp-image-58186\" src=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Phishing-Agent-800x399.jpg\" alt=\"\" width=\"800\" height=\"399\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Phishing-Agent-800x399.jpg 800w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Phishing-Agent-500x250.jpg 500w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Phishing-Agent-150x75.jpg 150w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Phishing-Agent-768x383.jpg 768w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Phishing-Agent.jpg 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify;\"><strong>How to get started<\/strong>:<\/p>\n<ul style=\"text-align: justify;\">\n<li>Visit: <a href=\"https:\/\/security.microsoft.com\/\">https:\/\/security.microsoft.com\/<\/a><\/li>\n<li>Incidents &#8211; <em>you can find incidents reported by the Security Copilot Phishing Triage Agent there<\/em><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3 style=\"text-align: justify;\">Alert Triage Agents in Microsoft Purview<\/h3>\n<p style=\"text-align: justify;\">These agents <strong>prioritize critical incidents in Data Loss Prevention (DLP) and Insider Risk Management (IRM)<\/strong>, categorizing alerts based on their impact on sensitive data. They provide comprehensive explanations for their categorizations and learn from admin feedback to improve future prioritizations.<\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"aligncenter size-large wp-image-58190\" src=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-LinkedIn-Microsoft-Purview-Agent-800x399.jpg\" alt=\"\" width=\"800\" height=\"399\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-LinkedIn-Microsoft-Purview-Agent-800x399.jpg 800w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-LinkedIn-Microsoft-Purview-Agent-500x250.jpg 500w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-LinkedIn-Microsoft-Purview-Agent-150x75.jpg 150w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-LinkedIn-Microsoft-Purview-Agent-768x383.jpg 768w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-LinkedIn-Microsoft-Purview-Agent.jpg 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify;\"><strong>How to get started<\/strong>:<\/p>\n<ul style=\"text-align: justify;\">\n<li>Visit: <a href=\"https:\/\/purview.microsoft.com\/\">https:\/\/purview.microsoft.com\/<\/a><\/li>\n<li>Data Loss Prevention &#8211; Alert Triage Agent &#8211; Needs attention &#8211; <em>you can find incidents reported by the Alert Triage Agent there<\/em><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3 style=\"text-align: justify;\">Conditional Access Optimization Agent in Microsoft Entra<\/h3>\n<p style=\"text-align: justify;\">This agent <strong>monitors new users and applications<\/strong>, analyzing their alignment with existing Conditional Access (CA) policies, and proactively detects security gaps. It recommends optimizations and provides one-click fixes to refine policy coverage effortlessly.<\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"aligncenter size-large wp-image-58178\" src=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Entra-Agent-800x399.jpg\" alt=\"\" width=\"800\" height=\"399\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Entra-Agent-800x399.jpg 800w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Entra-Agent-500x250.jpg 500w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Entra-Agent-150x75.jpg 150w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Entra-Agent-768x383.jpg 768w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Entra-Agent.jpg 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify;\"><strong>How to get started<\/strong>:<\/p>\n<ul style=\"text-align: justify;\">\n<li>Visit: <a href=\"https:\/\/entra.microsoft.com\/\">https:\/\/entra.microsoft.com\/<\/a><\/li>\n<li>Agents &#8211; Conditional Access Optimization Agent (Preview)<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3 style=\"text-align: justify;\">Vulnerability Remediation Agent in Microsoft Intune<\/h3>\n<p style=\"text-align: justify;\">This agent <strong>identifies, evaluates, and prioritizes vulnerabilities<\/strong>, offering clear, actionable recommendations for remediation. It continuously monitors newly published threats and assesses their risk levels to reduce exposure time.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-58182\" src=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Vulnerability-Remediation-Agent.jpg\" alt=\"\" width=\"800\" height=\"399\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Vulnerability-Remediation-Agent.jpg 800w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Vulnerability-Remediation-Agent-500x249.jpg 500w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Vulnerability-Remediation-Agent-150x75.jpg 150w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Defender-Vulnerability-Remediation-Agent-768x383.jpg 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify;\"><strong>How to get started<\/strong>:<\/p>\n<ul style=\"text-align: justify;\">\n<li>Visit: <a href=\"https:\/\/intune.microsoft.com\/#view\/Microsoft_Intune_Workflows\/SecurityManagementMenu\">https:\/\/intune.microsoft.com\/#view\/Microsoft_Intune_Workflows\/SecurityManagementMenu<\/a><\/li>\n<li>Overview &#8211; Vulnerability Remediation Agent<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3 style=\"text-align: justify;\">Threat Intelligence Briefing Agent in Security Copilot<\/h3>\n<p style=\"text-align: justify;\">This agent curates <strong>up-to-date, context-specific intelligence tailored to your organization\u2019s unique profile and attack surface<\/strong>. It delivers prioritized reports in just 4-5 minutes and highlights the most pressing threats while providing actionable recommendations.<\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"aligncenter size-large wp-image-58174\" src=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-Copilot-Threat-Intellicence-Briefing-Agent-800x399.png\" alt=\"\" width=\"800\" height=\"399\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-Copilot-Threat-Intellicence-Briefing-Agent-800x399.png 800w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-Copilot-Threat-Intellicence-Briefing-Agent-500x250.png 500w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-Copilot-Threat-Intellicence-Briefing-Agent-150x75.png 150w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-Copilot-Threat-Intellicence-Briefing-Agent-768x383.png 768w, https:\/\/www.schneider.im\/media\/2025\/04\/SCHNEIDER-IT-MANAGEMENT-2025-04-23-Update-Website-Microsoft-Security-Copilot-Threat-Intellicence-Briefing-Agent.png 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify;\"><strong>How to get started<\/strong>:<\/p>\n<ul style=\"text-align: justify;\">\n<li>Visit: <a href=\"https:\/\/securitycopilot.microsoft.com\/\">https:\/\/securitycopilot.microsoft.com\/<\/a><\/li>\n<li>Agents &#8211; Threat Intelligence Briefing Agent<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>Licensing<\/strong><\/h2>\n<p style=\"text-align: justify;\">Security Copilot <strong>pricing<\/strong> is based on the capacity in <strong>Security Compute Units (SCU).<\/strong><\/p>\n<ul style=\"text-align: justify;\">\n<li><strong>Provisioned SCUs<\/strong>: Use provisioned Security Compute Units (SCUs) for your <strong>regular, expected workloads<\/strong>. These units are billed at a consistent <strong>rate per hour<\/strong>.<\/li>\n<li><strong>Flexible Overage SCUs<\/strong>: Flexible overage SCUs are available for <strong>unexpected or seasonal workloads<\/strong>. They are only charged based on <strong>actual usage<\/strong>, up to your chosen overage limit, offering cost-effective scalability during periods of high demand. They are billed per hour and <strong>priced 50% higher<\/strong> than provisioned SCUs.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>More Information<\/strong><\/h2>\n<p style=\"text-align: justify;\">Announcement: <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/03\/24\/microsoft-unveils-microsoft-security-copilot-agents-and-new-protections-for-ai\/\">https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/03\/24\/microsoft-unveils-microsoft-security-copilot-agents-and-new-protections-for-ai\/<\/a>.<\/p>\n<p style=\"text-align: justify;\">Security Copilot pricing: <a href=\"https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/microsoft-security-copilot\/\">https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/microsoft-security-copilot\/<\/a>.<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/www.schneider.im\/contact\/\"><strong>Contact us<\/strong><\/a><strong> at SCHNEIDER IT MANAGEMENT consultancy concerning your Microsoft licensing and to secure advantageous licensing conditions for your organization.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Coming in May 2025, Microsoft will introduce six new agentic solutions within the Microsoft Security Copilot suite in public preview. These agents are designed to autonomously handle high-volume security and IT tasks, and integrate seamlessly with existing Microsoft Security solutions. What is Microsoft Security Copilot? Microsoft Security Copilot is a comprehensive security platform that integrates [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":33016,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[671,520,585,161,573,645],"tags":[],"class_list":["post-58169","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-copilot","category-microsoft-defender","category-microsoft-entra","category-microsoft-intune","category-microsoft-purview","category-microsoft-security"],"_links":{"self":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts\/58169","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/comments?post=58169"}],"version-history":[{"count":3,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts\/58169\/revisions"}],"predecessor-version":[{"id":58197,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts\/58169\/revisions\/58197"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/media\/33016"}],"wp:attachment":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/media?parent=58169"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/categories?post=58169"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/tags?post=58169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}