Security-Copilot

Why we included this project

Security teams already running Microsoft's security stack will get the most from this repo, since it shows how to push Security Copilot past its default behavior. The community has filled it with sample plugins, connectors, and KQL-based skills you can fork and adapt, and since the project welcomes contributions, it works as both a reference library and a channel for sharing your own work. It is not a single product you deploy; it is a set of working examples that demonstrate wiring Copilot into Sentinel, Defender, and other Microsoft services for day-to-day operations. If you are weighing whether Security Copilot belongs in your SOC workflow, browsing these plugins gives you a realistic picture of what is possible before you commit to custom development. Teams planning to build their own skills will also find a maintained template to follow.