Build your own promptbooks

Promptbooks in Microsoft Security Copilot contain one or more prompts that work together to accomplish specific security-related tasks. The prompts run one after another, building on previous responses.

In newer onboarding experiences, you typically begin working in Security Copilot with agents or from a chat session. Promptbooks extend the Security Copilot workflow experiences by allowing you to reuse a sequence of prompts.

You can create your own promptbook with the promptbook builder to automate investigation flows and optimize repetitive steps in Copilot that are customized to your needs and requirements. Check if you have appropriate access and permissions to create promptbooks.

You can also share the promptbooks you’ve created with other users so they can reuse and benefit from your workflows.

Start from a session with relevant prompts

To build a promptbook, you first need an active or previous session that contains prompts you want to reuse.

You can start a new session with relevant prompts as follows:

1. Select History.
2. Select New session.
3. Run one or more prompts that you want to include in your promptbook.

Once you have a session with relevant prompts, you can convert it into a promptbook.

Watch the following video to learn more about building your own promptbooks:

When to use promptbooks

Promptbooks are useful when you:

• Run the same sequence of prompts repeatedly
• Need a structured investigation flow
• Want to standardize workflows across your team

Use promptbooks together with:

• Agents for automated or repeatable workflows
• Prompts for ad-hoc investigation and exploration

Create a promptbook from an existing session

In the course of interacting with Security Copilot, you might realize that you regularly run the same set of prompts for different entities. This is a good opportunity to build a promptbook.

Create your promptbook

You can create your promptbook as follows:

• Start with an existing session that contains the prompts you want to include.

• Select the checkboxes beside the prompts or select the top box to include all prompts in the session.

• Selecting prompts enables the Create promptbook button.

  

Select Create promptbook to begin building the promptbook. Provide:

• A Name

• Tags (press Enter to separate keywords)

• A Description

  

Create or edit your prompts

You can modify prompt text and reorder prompts, but be aware that changes can affect results.

Specify any required input

Review your prompts and determine which elements should be reusable inputs.

For example, replace a threat actor name with:

• ThreatActor

Use angle brackets and no spaces. You can define multiple parameters.

Verify inputs under Inputs you’ll need.

Set prompts to continue on failure

You can configure prompts to continue execution if a step fails.

Select the pencil icon, enable Continue on failure, and save.

You can only set a prompt to continue on failure in promptbooks that you can edit.

Call system capabilities in the prompt (preview)

You can call a system capability directly from a prompt:

Select the prompts icon to view available capabilities.

Choose a capability, optionally add text, and save.

Saved prompts display required and optional inputs:

Set who can use your promptbook

• Choose who can use the promptbook:

  • Just me
  • Anyone in my organization

  

• Select Create and wait for the confirmation message.

Test the promptbook

You can test the promptbook as follows:

Select View after creation.

You can also:

1. Start or open a session.

2. Select the prompts icon in the prompt bar.

3. Search for your promptbook.

   

4. Provide required inputs and select Submit.

   

Edit the promptbook

You can edit the promptbook as follows:

1. Go to the Promptbook library.

2. Select the ellipses ().

3. Select Edit.

   

4. You can update name, tags, description, prompts, and parameters.

5. Select Save when finished.

Duplicate the promptbook

You can duplicate the promptbook as follows:

1. Open the Promptbook library.

2. Select the ellipses .

3. Choose Duplicate.

   

4. Edit the details as needed, then select Duplicate.

Share an existing promptbook

You can share an existing promptbook as follows:

1. Go to the promptbook.
2. Select Details.
3. Select Share.

Run the promptbook

You can run the promptbook as follows:

1. From the promptbook list, hover and select the run icon.

2. Or open details and select Start new session.

3. Fill in the required inputs, then select Run.

   

Delete the promptbook

You can delete the promptbook as follows:

1. Select the ellipses .

2. Select Delete.

   

Best practices and concepts to consider

Promptbooks help automate investigation workflows. Consider:

• Use effective prompts
• Balance number and complexity of prompts
• Reordering prompts can affect output and SCU usage
• You can cancel long-running promptbooks
• Session edits don’t affect the original promptbook unless saved
• Output can vary due to AI response variability

Related content

Use the following Security Copilot articles for guidance:

• Try promptbooks
• Create effective prompts