From the course: Microsoft Security Essentials: Concepts, Solutions, and AI-Powered Protection

Effective prompts in Microsoft Security Copilot - Microsoft Security Copilot Tutorial

From the course: Microsoft Security Essentials: Concepts, Solutions, and AI-Powered Protection

Effective prompts in Microsoft Security Copilot

“

- [Instructor] Microsoft Security Copilot is powered by generative AI. Prompting is how you interact with Security Copilot. What is a prompt? Basically, it's an instruction you send to Copilot. Then based on your prompt, Copilot will generate a response. The effectiveness of AI-generated responses largely depends on the quality of your prompts. For example, let's compare two prompts. "List incidents," versus, "Can you list the incidents from Microsoft Defender XDR within the last 30 days? This is for my security status update with management. Please show the results in a table with Name, Severity, Status, and Owner." Which prompt do you think will help Security Copilot better understand your request? Did you select the second one? Then you are right. How can you create effective prompts? Actually, you just need to ask four basic questions: what, why, how, and where. Specifically, "what" refers to the goal we want to achieve with AI. For example, to list the incidents within the last 30 days. "Why" refers to the context of our request. For example, the reason for finding incidents is for my security status update with management. "How" refers to your expectations of the results. For example, show the results in a table with name and severity. And the "where" refers to the source of services or data. For example, Microsoft Defender XDR. Now, let's put these essential elements together. We'll get an effective prompt. Here are some general tips for crafting your prompts. Be specific about what you want Copilot to do. For example, "List the high-severity incidents owned by John," instead of "List incidents." Be iterative. You can submit follow-up prompts to further improve the results generated by Copilot. Be contextual. You can provide background information to help Copilot better understand your request. For example, "This report is for non-technical managers." And to be positive. You want to ask Copilot to do something, rather than asking it not to do something. For example, "List the high and intermediate-severity incidents," instead of, "Don't show low-severity incidents." In addition, how do you call Microsoft Security Copilot in your prompts? You can simply call Copilot "you," rather than calling it "AI" or "assistant."

Contents