Expanding access to playbook generator for Microsoft Sentinel customers.
We’re excited to announce we’re making it easier than ever to go from intent to action with the AI-powered playbook generator now available to more customers.
What’s new
All Microsoft Sentinel customers in Defender portal can now create AI-generated playbooks directly in their automation workflow. As part of this change, Security Copilot enablement is no longer required: playbook generator is now available to more teams out of the box and without any extra cost.
What playbook generator does
Playbook generator uses AI to turn what you want to automate into a working playbook. Instead of hand-building automation in python code, describe the response you need in natural language and get an editable playbook, its tests and documentation generated for you right inside the Microsoft Defender portal.
- Faster response automation: go from idea to playbook in minutes.
- Built into your workflow: find it under Automation › + Create › Playbook Generator.
- Fully editable: generated playbooks are code-based, complete with tests, documentation and visual flow, that you can review and refine.
Who is it for
If you’re using Microsoft Sentinel in your Defender portal, the playbook generator is now within reach. This expansion brings AI-assisted playbook creation to significantly more security teams.
How to get started
Ensure you have the right permissions
To build and deploy generated playbooks, make sure You have the Automation Playbooks Unified RBAC permission with Read and Write access.
- Open Microsoft Defender Portal and go to Automation.
- Select + Create › Playbook Generator.
- Describe the playbook you want to create.
- Review, edit, and deploy.
Availability
- General availability: Already available.
- Cost: Included with Microsoft Sentinel - no additional charge.
Try Playbook Generator in your Microsoft Defender Portal today.
Microsoft