425 Show | Global Promptbooks in Microsoft Copilot for Security

Microsoft Copilot for Security brings you the power of generative AI, to help increase efficiency, effectiveness, and expertise of defenders and admins, to improve security outcomes at machine speed and scale. With prebuilt promptbooks that can function in a similar way as security playbooks, you can now accomplish your investigation, assessment, analysis, and summarization of key scenarios at the push of a button. In this session, we will cover how Microsoft Global Promptbooks enable our admins and defenders to vastly improve their effectiveness, with Copilot for Security showing them a full picture of an assessment from across Entra, Intune, Purview and Defender XDR products.

[reginanova]

I think it is important to consider how much SCUs the “User Analysis” promptbook would consume. SCUs cost would be the most important consideration for the client. If it is not sustainable the product implementation and adoption by the customer and their employees/SOC analysts will fail because it would be impossible to scale and too expensive to run. When creating promptbooks and educational videos for a wide audience we must optimize for the SCUs and run queries/promptbooks that would ideally consume 1 or less SCUs. I would speculate that the user analysis promptbooks shown in this video on the 15th minute probably cost around 6 SCUs if not more. What if the customer only has 5 SCUs allocated per hour and 12 SOC analysts having to run 4 - 5 investigations per hour( depending on the company size)?