Remediate recommendations with Microsoft Security Copilot

Microsoft Defender for Cloud's integration with Microsoft Security Copilot lets you remediate recommendations on the recommendations page with natural language prompts. Remediating recommendations with Microsoft Security Copilot lets you improve your security posture by addressing the risks and vulnerabilities in your environment.

Once Microsoft Security Copilot summarizes a recommendation in Defender for Cloud, you can decide how to handle it. By using prompts, you can have Microsoft Security Copilot assist you in the remediation process.

Prerequisites

• Enable Defender for Cloud on your environment.

• Have access to Azure Copilot.

• Have Security Compute Units assigned for Microsoft Security Copilot.

Remediate a recommendation

Copilot in Defender for Cloud can help you remediate recommendations.

1. Sign in to the Azure portal.

2. Search for and select Microsoft Defender for Cloud.

3. Go to Recommendations.

4. Select a recommendation.

5. Select Summarize with Copilot.

6. Review the summary.

7. Select Fix with Copilot.

8. Follow the prompts to have Copilot fix the recommendation.

9. (Optional) If a script is presented, select Run to apply the remediation.

If you're unable or unsure how to remediate a recommendation, you can ask Copilot for more information. You can also delegate the recommendation to an appropriate person if needed.

Next step