# Security Copilot Agents

Welcome to the Security Copilot Agents documentation. This collection of specialized agents helps you automate security operations, optimize configurations, and gain deeper insights into your Microsoft 365 and Azure environments.

### What Are These Agents?

Security Copilot Agents are intelligent automation tools that integrate with Microsoft Security Copilot to perform complex analysis, identify issues, and provide actionable recommendations. Each agent specializes in a specific area of security, compliance, or IT operations.

Think of them as expert consultants who can analyze your environment in minutes and tell you exactly what needs attention.

### Available Agents

#### Identity & Access Management

* [**Assignment Insights**](https://agents.glueckkanja.com/agents/assignment-insights/overview) - Analyzes and optimizes Intune policy and application assignments
* [**PIM Insights**](https://agents.glueckkanja.com/agents/pim-insights/overview) - Comprehensive analysis of Privileged Identity Management activations
* [**Privileged Admin Watchdog**](https://agents.glueckkanja.com/agents/privileged-admin-watchdog/overview) - Identifies and removes standing administrative privileges
* [**License Optimizer**](https://agents.glueckkanja.com/agents/license-optimizer/overview) - Optimizes Microsoft 365 license allocation and identifies cost savings
* [**GSA Reporting & Assignment Agent**](https://agents.glueckkanja.com/agents/gsa-reporting-and-assignment-agent/overview) - Detects degraded connectors, stale IP ranges, orphaned assignments, and unusual traffic behaviors.
* [**Insider Risk Profiler**](https://agents.glueckkanja.com/agents/insider-risk-profiler/overview) - Enriches IRM alerts with identity risk, device compliance, and data protection signals

#### Compliance & Governance

* [**Compliance Assistant**](https://agents.glueckkanja.com/agents/compliance-assistant/overview) - Automated DPB and GDPR compliance assessment with gap analysis
* [**Policy Advisor**](https://agents.glueckkanja.com/agents/policy-advisor/overview) - Deep analytics into Purview policy effectiveness and data governance
* [**Policy Gap Remediator**](https://agents.glueckkanja.com/agents/policy-gap-remediator/overview) - Identifies and remediates data governance policy gaps
* [**Classification Optimizer**](https://agents.glueckkanja.com/agents/classification-optimizer/overview) - Analyzes and optimizes Purview Sensitive Information Types (SITs)

#### Operations & Security

* [**Device Troubleshooter**](https://agents.glueckkanja.com/agents/device-troubleshooter/overview) - Diagnoses and resolves Intune device and configuration issues
* [**Forensic Agent Core**](https://agents.glueckkanja.com/agents/forensic-agent-core/overview) - Deep-dive incident analysis with threat intelligence enrichment
* [**Attack Mapping Agent**](https://agents.glueckkanja.com/agents/attack-mapping-agent/overview) - MITRE ATT\&CK mappings for Microsoft Sentinel analytic rules
* [**Cloud App Activity Profiler**](https://agents.glueckkanja.com/agents/cloud-app-activity-profiler/overview) - Profiles SaaS domain risk with automated discovery

### How to Use This Documentation

Each agent has three main documentation pages:

* **Overview** - What the agent does, use cases, and why you'd use it
* **Requirements** - Permissions needed, setup requirements, and configuration options
* **Changelog** - Version history and release notes

### Getting Started

Ready to deploy your first agent? Head to the [get-started](https://agents.glueckkanja.com/get-started "mention") guide to learn how to set up Security Copilot Agents in your environment.

### Need Help?

Check the [troubleshooting](https://agents.glueckkanja.com/troubleshooting "mention") section for common issues and solutions.

### About SCU Costs

Each agent includes an estimated SCU (Security Copilot Unit) cost in its overview. These are approximate costs per run and may vary based on your environment size and complexity. Plan your usage accordingly to manage costs effectively.