Microsoft Security Copilot
Microsoft Security Copilot is an AI agent used to access and investigate data in the Data Lake.
How Microsoft Security Copilot communicates with Illumio
Microsoft Security Copilot facilitates communication with Illumio through natural language queries, similar to the interaction with ChatGPT, where you can inquire about data originating from Microsoft Security Graph.
Illumio has developed the Illumio AI Agent for the Security Copilot initiative.
The Illumio AI Agent converts natural language inquiries into queries, executes them, and delivers the corresponding responses.
Currently, the Illumio AI Agent uses these Sentinel Data Lake sources:
ThreatIntelligence
Sign-in logs
Audit logs
Illumio will continue to add additional sources from Microsoft Sentinel to enhance the Illumio AI Agent with richer context.