Use Security Copilot for IT/security investigations
An IT/security team uses Security Copilot agents to support investigations across Defender, Entra, Intune or Purview, while monitoring included compute usage.
Where the action happens
Defender / Entra / Intune / Purview / Security Copilot
Product or feature needed
Security Copilot for eligible Microsoft 365 E5/E7 customers
AI required
Yes
Extra credits
Depends - Microsoft describes included Security Compute Units for eligible E5/E7 customers, with usage/capacity limits
Technical skill
High
Risk level
Medium - IT/security-only use case, not a general staff Copilot feature
Watch-outs for Advanced: govern & scale
- Keep detailed governance here rather than repeating it on every beginner capability.
- Track ownership, access, cost, lifecycle and exceptions once services are shared or business-critical.
- AI Redlines remain separate from normal governance and should be treated as hard boundaries.
Community feedback
Has your organisation tried this? Confirm whether it's possible, whether it's useful, and share any tips.
0
Confirmed possible
0
Reported not possible
0
Found it useful
0
Not useful
Loading feedback…