Remediate recommendations with Microsoft Security Copilot

Microsoft Defender for Cloud's integration with Microsoft Security Copilot lets you remediate recommendations on the recommendations page with natural language prompts. Remediating recommendations with Microsoft Security Copilot lets you improve your security posture by addressing the risks and vulnerabilities in your environment.

Once a recommendation is summarized with Microsoft Security Copilot in Defender for Cloud, you can decide how best to handle it. Using prompts, you can have Microsoft Security Copilot assist you in the remediation process.

Prerequisites

• Enable Defender for Cloud on your environment.

• Have access to Azure Copilot.

• Have Security Compute Units assigned for Microsoft Security Copilot.

Remediate a recommendation

Copilot in Defender for Cloud can assist with the remediation process for recommendations.

1. Sign in to the Azure portal.

2. Search for and select Microsoft Defender for Cloud.

3. Navigate to Recommendations.

4. Select a recommendation.

5. Select Summarize with Copilot.

6. Review the summary.

7. Select Fix with Copilot.

8. Follow the prompts to have Copilot fix the recommendation.

9. (Optional) If a script is presented, select Run to apply the remediation.

If you're unable or unsure how to remediate a recommendation, you can ask Copilot for additional information to assist you with more prompts. You can also delegate the recommendation to an appropriate person if needed.

Next step