Lets Security Copilot reach a data source, whether Microsoft, third-party or custom. Users still need their own permissions on that source for it to return anything.
Also called plugin.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Security Copilot plugin in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Security Copilot
Security assistant powered by generative AI, used in its own portal or embedded in Intune, Entra, Defender and Purview, and extensible with agents and plugins.
- Search data source
Connection object in Azure AI Search pointing an indexer at its content, which must be a supported source: Blob, ADLS Gen2, Table Storage, Cosmos DB, Azure SQL, SQL Managed Instance or SQL Server on Azure VMs. One indexer, one data source.
- AGDLP
Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.
- RETURN
Comes after the VAR definitions in DAX and holds the expression whose value the formula gives back. While debugging, pointing it at one variable for a while is a useful trick.
Related terms
- Apache JMeter
An open-source tool for load testing. Azure Load Testing runs its JMX scripts with support for every JMeter protocol and plugin, and also supports Locust.
- Azure CNI
Network plugin for AKS in which each pod receives an IP address from the VNet; virtual nodes depend on it.
- JMX
Apache JMeter saves test plans in this format. Azure Load Testing can run such scripts, with any JMeter protocol or plugin, by setting testType to JMX; it also handles Locust and URL-based tests.
- kubenet
Simple network plugin for AKS that uses fewer VNet IP addresses and can't run Windows nodes. Its retirement date is 31 March 2028, and clusters should move to Azure CNI Overlay.
- On-behalf-of authentication
Security Copilot relies on this OAuth flow so that a plugin never exceeds what the signed-in user may see. As a result, users need data roles too, Microsoft Sentinel Reader for example.