BluForge IntelliGuard

BluForge IntelliGuard is a read-only AI-powered SOC investigation and threat triage assistant built for Microsoft Security Copilot. The solution helps security teams investigate incidents, analyse identity risks, review endpoint compliance, and correlate security findings across Microsoft security workloads using natural language interactions within Microsoft Security Copilot.

Agent tasks:
SOC investigation and incident triage, threat investigation, identity risk analysis, privileged access review, audit investigation, endpoint compliance assessment, Defender XDR incident analysis, Sentinel incident investigation, DLP alert investigation, insider risk analysis, security posture assessment, incident summarization, guided remediation generation, risk correlation across Microsoft security workloads.

Service/Workflow interaction data with agent

Input:
Entra user ID, user principal name (UPN), Defender XDR incident ID, Sentinel incident ID, device name, Intune device ID, audit log query, DLP alert ID, application ID, service principal ID, severity level, keyword search, privileged role details, compliance policy details.

Output:
Incident summary report, Defender XDR incident narrative, Sentinel investigation details, MITRE ATT&CK mappings, guided remediation recommendations, MFA status report, privileged role analysis, user risk summary, device compliance report, stale device assessment, DLP alert summary, insider risk findings, audit investigation report, application permission analysis, security posture insights, investigation recommendations.