Breach Storyline & Impact Narrator by Inspira

Agent Tasks:
Breach Storyline & Impact Narrator automatically analyzes Microsoft Sentinel and Defender XDR incidents to reconstruct attack progression, identify root cause, assess business impact, map MITRE ATT&CK techniques, and generate executive-friendly breach narratives. The agent correlates alerts, entities, identities, devices, and threat intelligence to provide a clear understanding of how the attack occurred and its organizational impact.

Input:

• Microsoft Sentinel Incident ID
• Microsoft Defender XDR Incident ID

Output:

1. Executive Summary
2. What Happened
3. Why It Happened
4. Blast Radius & Business Impact
5. Containment & Current Status
6. Risk Outlook
7. Recommended Next Steps