Security Alert Triage Agent
de Microsoft Security
Automates security alert triage with advanced security workflows.
The Security Alert Triage Agent is the evolution of the Phishing Triage Agent. It is designed to triage alerts at scale, including phishing, identity, and cloud.
Leveraging AI, the agent autonomously classifies and resolves alerts as malicious or false alarms, providing a transparent rationale for each decision in natural language and through visual representation. It also incorporates analyst feedback to continuously improve accuracy over time. By streamlining triage and reducing manual effort, the agent enables teams to focus on high-value work and respond to incidents faster.
Output: Classified alerts with detailed verdict explanation and visual graph insights to support incident and alert triage, including resolution of false alarms.
Learn more about setting up the Security Alert Triage Agent