Analyze recommendations with Microsoft Security Copilot
Microsoft Defender for Cloud's integration with Microsoft Security Copilot allows you to analyze all of the recommendations presented on the recommendations page. By narrowing the scope of the recommendations page, you can focus on specific recommendations and get a better understanding of your security posture.
Once the list of recommendations is filtered, you can investigate specific recommendations and gain a better understanding of the risks and vulnerabilities that are present in your environment.
Prerequisites
Analyze a recommendation
Microsoft Security Copilot gives you the ability to analyze your recommendations. Through the use of prompts, you can filter and refine the presented recommendations to focus on specific areas of interest.
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud.
Navigate to Recommendations.
Select Analyze with Copilot.
Select one of the suggested prompts or enter a prompt in natural language.
Some sample prompts include:
- Show risks for publicly exposed resources
- Show risks for resources with sensitive data
- Show risks for critical resources
- Show risk to data
Review the provided answer.
(Optional) You can select a suggested prompt or enter a unique prompt to further refine the results.
Select Apply filter to view the updated recommendations.
The recommendations page updates with the appropriate filters applied based on the prompt you provided. Copilot remains open and you can enter other prompts as needed.