https://catalogartifact.azureedge.net/publicartifacts/adaquestinc1589508805668.scp_agent_l1_soc_triage_agent-197e0f95-9eb3-4392-bb67-a86711f84808/43b4365f-d92f-4580-843b-5b693903a5cd_adaLogoAgent216.png
L1 SOC Triage Agent
par adaQuest
Just a moment, logging you in...
Enhance SOC workflows with L1, designed for rapid triage and threat prioritization.
The L1 SOC Triage Agent accelerates and standardizes the triage of Microsoft Sentinel incidents for Tier-1 SOC analysts.
It automatically collects and correlates evidence from Microsoft Defender, Purview, and Threat Intelligence (DTI), applying MCP-aligned logic to classify each incident as Close, Remediate, or Escalate.
The agent produces a concise Markdown triage report containing an executive summary, correlated evidence, analyst reasoning, and actionable recommendations — all within Security Copilot.
Designed for operational efficiency, it ensures consistent triage quality, reduces time-to-respond, and enables analysts to focus on higher-severity cases.
Vue d’ensemble
https://catalogartifact.azureedge.net/publicartifacts/adaquestinc1589508805668.scp_agent_l1_soc_triage_agent-197e0f95-9eb3-4392-bb67-a86711f84808/cbf43d64-5621-4856-aa20-eac6548f4417_Screenshot3.png
https://catalogartifact.azureedge.net/publicartifacts/adaquestinc1589508805668.scp_agent_l1_soc_triage_agent-197e0f95-9eb3-4392-bb67-a86711f84808/331207b9-9461-45e3-ad1a-1056eabf8abd_Screenshot1.png
https://catalogartifact.azureedge.net/publicartifacts/adaquestinc1589508805668.scp_agent_l1_soc_triage_agent-197e0f95-9eb3-4392-bb67-a86711f84808/704a847a-1bdc-40c6-b674-c4aa1c841dc1_Screenshot2.png
Autres applications de adaQuest
Data Leak AgentadaQuestInvestigates Sentinel incidents for data leaks and delivers a clear verdict with evidence and action
+1
Applicable to:
SaaS
SaaSNaN out of 5
adaQuest C-SOCaaS | Managed XDR on Microsoft Sentinel & Defender XDRadaQuestadaQuest C-SOCaaS is a service that provides monitoring, detection and analysis of cyber security threats. This service goes above and beyond by proactive detention of advanced targeted attacks that have gone undetected by your existing perimeter controls.
+1
Applicable to:
Managed Services
Managed ServicesNaN out of 5
EWS Sunset Readiness AssessoradaQuestEWS dependency risk assessment using Entra signals; outputs a Graph-first remediation plan.
+1
Applicable to:SaaS
SaaSNaN out of 5
Admin Guard Insight AgentadaQuestMonitor and protect admin activities with Admin Guard Insight Agent's powerful analytics.
+1
Applicable to:SaaS
SaaSNaN out of 5
Login Investigator AgentadaQuestInvestigates user sign-ins to detect risk, anomalies, CA outcomes, and related incidents.
+1
Applicable to:SaaS
SaaSNaN out of 5