topic
AI
2 posts tagged “AI”.
Operational Notes on Microsoft Security Copilot Agents in Defender XDR and Microsoft Entra ID
Practical SOC observations on Security Copilot agents — how they're deployed, how they consume Security Compute Units, the agentic identities and Unified RBAC roles they create, where to monitor usage, and KQL for reviewing agent activity.
Microsoft Sentinel MCP Entity Analyzer: Explainable Risk Analysis for URLs and Identities
How Sentinel's Entity Analyzer changes the enrichment and triage model — a single explainable verdict for URLs and identities via the Sentinel MCP tools, with the prerequisites, concurrency limits, cost model, and rollout pattern that make it work in production.