https://store-images.s-microsoft.com/image/apps.8664.6741570c-859f-4587-975a-275a24fdc437.58b53bc8-30df-4030-9283-a5682f6008e3.4b28dda4-923c-417a-a73e-5a0e36e0e8b4

Phishing Triage Agent

by Microsoft Security

Automates phishing incident analysis and response with advanced security workflows.

The Microsoft Defender Phishing Triage Agent helps security operations analysts to triage and classify user-submitted phishing incidents. The agent operates autonomously, provides a transparent rationale for its classification verdicts in natural language, and continuously learns and improves its accuracy based on feedback provided by analysts.

Agent tasks: Alert triage, phishing detection, threat classification, signal correlation, incident prioritization, automated investigation, response acceleration
Agent workflow
Input: Phishing-related alerts and signals from Microsoft Defender XDR
Output: A prioritized queue of phishing alerts with automated classification and investigation details to guide response actions.

At a glance

https://store-images.s-microsoft.com/image/apps.22785.6741570c-859f-4587-975a-275a24fdc437.58b53bc8-30df-4030-9283-a5682f6008e3.009fa96b-d8ee-4a45-9e1f-b3134d60dd12