What is Microsoft Security Copilot Alert Triage Agents?

Microsoft Security Copilot Alert Triage Agents are autonomous assistants that work through queues of incoming security alerts, gathering the surrounding evidence for each one and judging whether it represents a genuine threat or a false positive. Every decision is returned with a written rationale and the evidence behind it, and analyst corrections feed back into the agent so its later judgements match how the team actually handles similar cases.