Microsoft Security Copilot in Intune deep dive – Part 1: Features available in public preview

Even better query : show me all devices where the same proactive remediation was executed more than 2 times in the last 7 days against same machine, and explain if the multiple executions were done because the detection script reported a proper exit code 1, or because the detection script  crashed and reported an "65009 Invalid json for the discovered setting" error.

The business justification would be : avoid impacting the CPU performance of the devices because of self-inflicted script issues.

Unfortunately, this would probably require the AI engine to store lot of intermediate state datas, which is probably extremely expensive in terms of processing, compared to current Intune Copilot features, which are just a translation layer into existing GraphAPI calls.