Incident Threat Advisory Agent by Inspira

Agent Tasks:
Incident Threat Advisory Agent automatically analyzes Microsoft Sentinel and Microsoft Defender XDR incidents to identify detection gaps, security weaknesses, and improvement opportunities. The agent reviews incident evidence, alerts, entities, attack techniques, and historical activity to generate prioritized recommendations for detection engineering, security controls, analytics rules, policy hardening, and security posture improvements.

Agent Workflow

Input:

• Duration like 30,90 etc
  
  

Output:

• Executive Rollup
• Window Population Summary
• Detection Coverage Gap Analysis
• Prioritized Recommendations
• Dependency & Validation Summary