Google Security Operations vs. Microsoft Security Copilot

Siemplify has a structure that is effective for supporting all types of automation and orchestration wants. It is generally designed to give security analysts an easier time; it sends group alerts that categorized according to IP. Provides customized playbooks that we have redesigned to fit the needs of our organization and they provide high quality triage.

Incentivized

Microsoft Security Copilot is well-suited for environments where security teams face high alert volumes and need rapid triage. It is effective during active threat response, helping us establish timelines and suggest remediation steps quickly. Copilot also excels in executive reporting, generating clear summaries for leadership without much effort. Security Copilot is less effective outside of Microsoft's ecosystem because it doesn't integrate well with other products.

Incentivized

• SOAR
• Threat Intel
• SIEM

Incentivized

• Helps with finding errors in PowerShell scripts.
• Quick to answer questions about Excel formulas.
• Microsoft Security Copilot helps with summarizing and creating meeting notes.

Incentivized

• Playbook should put on view every domain that it is able to read.

Incentivized

• It is super expensive, which can be a turn off for many small businesses looking to leverage its capabilities
• It can be very complex to set up, with many prerequisite steps that need to happen prior to being able to use it
• With all AI-based solutions, it can sometimes hallucinate, but that is to be expected at some level

Incentivized

Anyone can use it. Easy to prompt, also capabilities to become advance with custom agents. It can become custom to your workflow. Many people will have their unique experiences to share and results are generally positive. This is a growth in the product from the effect of community and adoption/usage.

Incentivized

My usage of other products is based on SIEM tools. So far, Microsoft Security Copilot is the only product I've seen that works across multiple technologies/products to provide full visibility into security tooling using AI. I know other vendors are working towards this, but Microsoft has definitely taken a lead.

Incentivized

• Python is required
• Need to understand conenctors

Incentivized

• Helps reduce time spent creating a baseline script.
• Some errors get corrected but then get reintroduced while adding functionality.
• I noticed that when using this for PowerShell it will sometimes have you install the module in the script without verifying if it is already installed. You must read the script before executing.

Incentivized