Phishing Triage Agent
by Microsoft Security
Automates phishing incident triage with advanced security workflows.
The Microsoft Defender Phishing Triage Agent triages user-submitted phishing incidents. Leveraging AI to autonomously classify and resolve alerts as either truly malicious or as false alarms, the agent provides a transparent rationale for its classification verdicts in natural language, and uses feedback provided by analysts to continuously improve its accuracy. Since user-submitted phishing incidents are often high volume and require significant time to triage, the Phishing Triage Agent frees up time for high-value work.
Output: Classified alerts with detailed verdict explanation and visual graph insights to support incident triage and prioritization, including resolution of false alarms.
Learn more about setting up the Phishing Triage Agent.