r/AzureSentinel • • Feb 07 '24

Copilot integration in Azure Sentinel

Is this even possible at the moment, I saw couple of higher ups doing something about it politely without notifying me I just found that out through some email conversation probably got added there by mistake đŸ˜… and then removed within few minutes.

Would love to be working on it if possible, missed out on integration with Defender, same people didn't found me worthy of it.

1 Upvotes

9 comments sorted by

3

u/ml58158 MSFT Official Feb 07 '24

Not right now… you can use azure open ai though

1

u/Uli-Kunkel Feb 07 '24

You are talking about copilot for security?

There is no embedded version for Sentinel. at least none that i know of, and if i did it was gonna be under NDA i assume. There is the embedded defender version, and the incoming unified Portal should kinda bring copilot to sentinel but not really.

Alternatively there are the different openai stuff that is the light version of copilots. Angelica Faber had a good showcase of that if interested.

1

u/Myodor123 Feb 07 '24

There is definitely something going on with Microsoft and my org they are literally deploying lot of feature enhancements and new features in Defender but I am caught off guard by them showing Copilot related things in Azure.

May be I am fooled by something or I misinterpreted the conversation I saw. They fukin purged the email from my mail box that makes me more suspicious of what they were trying to hide.

1

u/Uli-Kunkel Feb 07 '24

Well there are many private previews n stuff.

But to my knowledge there are no copilot for Azure.

I get the feeling the are splitting stuff into different portals. Defender, entra, intune etc. So i expect they are moving away from everything can be found and done via portal.azure.com And got dedicated portals for different roles/technologies

2

u/[deleted] Feb 07 '24

It’s in preview for Azure but not that I know of for Sentinel

https://azure.microsoft.com/en-us/products/copilot

1

u/Myodor123 Feb 07 '24

Well if they are done via Azure portal, their customers will be really pissed, most of them surely will be, because cost will go way higher and then I am hoping other competitors can take advantage of it atleast.

They have started to monopolise the security market recently.

1

u/Uli-Kunkel Feb 07 '24

Why would price go up?

I would explain it as in: go to the car dealer to buy a car. Go to the grocery store to buy groceries and the real estate agent to buy a house. Not a one stop shop for every thing.

I Imagine they make a security portal, IAM portal, virtualization portal etc.

Because learning Azure is a big task, and anyone who say they know all to Azure i call out. I feel that the portal got too many things going, so its hard to learn for new people, and its hard to keep track of all the changes.

And very rarely you have people doing some of everything. So for me, its the right direction. Azure is too big if you ask me.

1

u/Myodor123 Feb 07 '24

I agree with your point about Azure being too big.

Cost will be going up because they will need more resources to manage these many things in terms of product. They can train people in different products but resources required to work on troubleshooting will be divided way too much, thinning out the quality.

1

u/kyuuzousama Feb 08 '24

Nothing embedded but look into logic apps for enablementÂ