Remediate recommendations with Microsoft Security Copilot

Microsoft Defender for Cloud integrates with Microsoft Security Copilot so you can remediate recommendations from the recommendations page by using natural language prompts. This workflow helps you reduce risk and improve your security posture.

Once Security Copilot summarizes a recommendation in Defender for Cloud, you can choose how to handle it. You can then use prompts to guide the remediation process.

Prerequisites

Before you begin, make sure you have the following prerequisites:

• Enable Defender for Cloud on your environment.

• Have access to Azure Copilot.

• Have Security Compute Units assigned for Microsoft Security Copilot.

Remediate a recommendation

Copilot in Defender for Cloud can help you remediate recommendations.

1. Sign in to the Azure portal.

2. Search for and select Microsoft Defender for Cloud.

3. Go to Recommendations.

4. Select a recommendation.

5. Select Summarize with Copilot.

6. Review the summary.

7. Select Fix with Copilot.

8. Follow the prompts to have Copilot fix the recommendation.

9. (Optional) If a script is presented, select Run to apply the remediation.

If you're unable or unsure how to remediate a recommendation, you can ask Copilot for more information. You can also delegate the recommendation to an appropriate person if needed.

Next step