Share via


Build Security Copilot agents using natural language prompts

Important

Some information in this article relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

Security Copilot provides a simple interface so that you can quickly and easily build agents using natural language. Whether you're triaging phishing alerts, optimizing Conditional Access policies, or automating vulnerability remediation, you can now describe what you want your agent to do and have Security Copilot build the agent for you. Based on your description, Security Copilot then provides tools and instructions, which you can customize to suit your workflow.

Security Copilot will:

  • Understand your intent
  • Suggest tools and instructions for the agent to use
  • Autogenerate the agent YAML file, which can be further customized.

The natural language to agent method offers a quick and intuitive way to begin creating your agent. Once you've assembled most of the core components, you'll transition to the agent builder to complete the process. The agent builder enables you to finalize your agent's configuration, publish it, and run tests. Regardless of which method you use to build your agent, the final output is always an agent definition YAML file.

Build an agent using natural language

Important

Creating an agent using natural language (NL2Agent) is in Private Preview, but globally available.

  1. Sign in to Security Copilot (https://securitycopilot.microsoft.com).

  2. Navigate to Build.

    Image of the build menu item

  3. From the Build page, you'll see a prompt bar where you can describe what you want your agent to do. You also have suggested prompts to help you get started with building your agent.

    Image to enter natural language to build agent

  4. You can build agents using natural language and answer questions that Security Copilot poses to help you build your agent.

  5. If you're satisfied with the agent that Security Copilot created, confirm that you want to proceed. The agent is then created for you. In this example, a Post Incident Report Generator agent is being created. You can converse with Security Copilot to customize your agent as needed.

    Image of the agent building experience using natural language

  6. Select View agent configuration to configure your agent. You'll be taken to the agent builder page where you can continue building your agent. The agent builder helps you tweak all components of the agent such as agent instructions and its associated tools, which are used to autogenerate the agent YAML file.

    Image of the agent view configuration in agent builder

Next steps