Common questions about Copilot in Microsoft Defender for Cloud

Microsoft Defender for Cloud's integration with Copilot for Security brings the benefits of AI and automation to your security operations. Copilot helps you prioritize and respond to security incidents faster and more effectively.

What can go wrong when I enter a prompt into Copilot for Azure?

When you enter a prompt into Copilot for Azure, you might encounter the following issues:

  • Copilot for Azure might fail to choose a skill.
  • Copilot for Azure might not select the Defender for Cloud skill.
  • Copilot for Azure might select its own skill instead of a Defender for Cloud skill. For example, a skill belonging to Azure documentation, a skill focused on Azure alerts.
  • A Copilot for Security skill might be selected. For example, CVS related prompts can sometimes be answered by Microsoft Defender External Attack Surface Management skills.
  • A Defender for Cloud skills is selected but the user doesn't have Copilot for Security security compute units (SCUs). Learn more about managing the usage of SCUs in Copilot for Security.
  • A Defender for Cloud skill is selected but the response can be blocked by security measures.

Is it possible for a user to submit a prompt with the intentions of Copilot for Security of answering it and Azure Copilot answering it instead?

Yes. If you ask a question that doesn't relate to a skill that Defender for Cloud currently supports, Azure Copilot attempts to answer the question based on the skills and data available to it.

How can I know which skills are currently supported?

To get a better understanding of the skills that Defender for Cloud currently supports, check out Analyze recommendations with Copilot for Security.

Is there a way to determine which Copilot is responding to a user’s prompt?

Yes. When you submit a prompt, a progress screen appears. If the message Using Copilot for Security appears, then Azure Copilot passed along the prompt to Copilot for Security to respond.

Screenshot that shows the copilot window showing the words Using Copilot for Security.

What happens when Azure Copilot or Copilot for Security can't handle a user prompt?

If a prompt can't be answered by either Azure Copilot or Copilot for Security, a response stating "Sorry, I can't assist with that" will be displayed.

I got a response from one of the Copilots that is inaccurate, what should I do?

For any responses that somehow deviate from your expectations, we recommend using the feedback option that appears after the prompt by selecting up the thumbs-up or thumbs-down buttons.

Is there a way to force Azure Copilot to use Copilot for Security for all prompts?

No.

Will I be charged for using Azure Copilot if my skill is executed by Copilot for Security?

No.