Security Alert Triage Agent
Microsoft · Cybersecurity & IT
Certification per Microsoft Marketplace.
Evidence tier Source Confirmed · 9 captures on record
What the publisher says
As described on Microsoft Marketplace.
The Security Alert Triage Agent is the evolution of the Phishing Triage Agent. It is designed to triage alerts at scale, including phishing, identity, and cloud.
Leveraging AI, the agent autonomously classifies and resolves alerts as malicious or false alarms, providing a transparent rationale for each decision in natural language and through visual representation. It also incorporates analyst feedback to continuously improve accuracy over time. By streamlining triage and reducing manual effort, the agent enables teams to focus on high-value work and respond to incidents faster.
Show the rest of the publisher’s description (5 more lines)
Agent tasks: Phishing Triage, Cloud triage, Identity triage.
Agent workflow
Input: Alerts generated in Microsoft Defender.
Output: Classified alerts with detailed verdict explanation and visual graph insights to support incident and alert triage, including resolution of false alarms.
Learn more about setting up the Security Alert Triage Agent
Preview
1 image
Agent build and provenance
Sign in to see the provenance.
The evidence, the layer-by-layer tracing, the risk basis, and the cross-marketplace links are open to signed-in accounts.
Sign inSources
Publisher resources
2 linksEvidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.