Leverage Custom Promptbooks to Optimize your Security Workflows

What are Custom Promptbooks?

Copilot for Security comes with prebuilt promptbooks, a series of prompts that have been put together to accomplish specific security-related tasks. They can function in a similar way as security playbooks, ready-to-use workflows that can serve as templates to automate repetitive steps, for instance, with regards to incident response or investigations. Each prebuilt promptbook requires a specific input (for example, a code snippet or a threat actor name). Custom promptbooks consist of the natural language prompts you choose in the order you wish them to run to meet your unique common security-related use cases to optimize your workflows.

How can you use Custom Promptbooks?

Users can create custom promptbooks via an existing session or by duplicating a promptbook from their Promptbook Library.

Saving Custom Promptbooks from an existing Copilot for Security standalone session

1. Navigate to the standalone experience at https://securitycopilot.microsoft.com/. 
2. Select the “Open Menu” icon in the top left corner and navigate to "My sessions".
   
3. Click on a session from the list that you would like to turn into your custom promptbook.
4. Select the checkbox next to the prompts in the session that you would like to include in your new custom promptbook and then click on the “Create promptbook” icon at the top of the screen. Note: You will need at least two prompts selected to create a custom promptbook.
   
5. A “Create a promptbook” window will appear. Here, the user will be able to define their custom promptbook’s name, add tags, provide a description, and make edits to their custom promptbook’s prompts. These edits include the ability to modify the prompts’ input(s), re-arrange the flow of the prompts, as well as add additional prompts. The user may also gate their custom promptbook to be used solely by them or other Copilot users within their tenant.

Watch how you can create a custom promptbook here. 

Duplicating Promptbooks from the Promptbook Library

In order to duplicate a promptbook to create a new custom promptbook, you’ll want to access the Promptbook Library. Copilot’s promptbook library empowers users to view, run, and manage their promptbooks. The promptbook library is where users can modify their existing custom promptbooks or select them to run.

1. To navigate to your custom promptbooks, please select the “Open Menu”  icon in the upper-left hand pane of Copilot for Security’s standalone portal and select “Promptbook library”.
   

   Navigating to Promptbook Library from the Copilot for Security standalone Home page

2. Users will be directed to the Promptbook library page with options to view “All” promptbooks, their custom promptbooks “My promptbooks”, custom promptbooks configured by them or others within their tenant “[Organization Name]” or promptbooks published by “Microsoft” for wide-use across all Copilot users. Note: Users may run an existing promptbook from their Promptbook Library.
   

   Selecting a promptbook to run from the Promptbook Library.

3. Users may duplicate an existing promptbook from their Promptbook Library by hovering over an existing promptbook in the list, selecting the "meatball" icon, and then clicking on "Duplicate".

4. Use the “Duplicate promptbook” window that appears to create a new name for your new custom promptbook, add tags, create a description, and edit prompts. There is also the ability to specify what you want your input to be and who has access to view and use the new promptbook.

Duplicate promptbook window

For more on promptbooks and Copilot’s promptbook library, see Using promptbooks in Microsoft Copilot for Security | Microsoft Learn.

Call to Action

• Test your own Custom promptbooks based off use case scenarios.
• Test and use Sample promptbooks from our GitHub here.

Learn more about Copilot for Security

To learn more about Microsoft Copilot for Security, visit aka.ms/CopilotForSecurity or contact your Microsoft sales representative. If you missed us at Microsoft Secure, you may watch the replay video.