Browse to https://securitycopilot.microsoft.com/

Setup

Verify that Agents and Fletch AI Agent are set up.

  1. Click on Sources icon:

    Screen_Shot_2025-05-02_at_4_10_17_PM.png

  2. Switch the Agents toggle to ON position if not enabled already and close window

    Screen_Shot_2025-05-09_at_4_29_03_PM.png

  3. Locate Fletch AI Agent (<version>-beta) under Non-Microsoft category

    <aside> 💡

    Use the search icon below ‘Manage sources’ heading if you have trouble locating it.

    </aside>

    Screen_Shot_2025-05-05_at_11_50_02_PM.jpeg

  4. In the ‘Settings’ window, paste the Fletch API token value and click ‘Save’:

    Screen_Shot_2025-05-06_at_12_15_31_AM.jpeg

Now your Fletch AI Agent is setup, so you are ready to give it a try.

  1. Click on the ‘Prompts’ icon next to the prompt box:

    Screen_Shot_2025-05-06_at_12_35_16_AM.png

  2. In the top search box, type ‘Fletch’. Among the search results, click on the Fletch Daily Report Capability:

    Screen_Shot_2025-05-06_at_12_41_09_AM.png

  3. You will see a Fletch Daily Report Capability lozenge added at the top of the Security Copilot prompt box. Click the ‘Send’ button to submit the request:

    Screen_Shot_2025-05-06_at_12_44_09_AM.png

  4. Below is a sample Daily Report from the Fletch AI Agent. You will see results specific to your environment:

    Screen Shot 2025-05-06 at 12.47.00 AM.png

  5. At the end of the report you will also see a number of example prompts. You can use them to further interact with the Fletch AI Agent to get more details about the various threats in the report:

    Screen_Shot_2025-05-06_at_12_59_56_AM.png

  6. In addition to example prompts, you can also use Fletch’s agentic capabilities to get additional information about the threats impacting your environment. Click the ‘Prompts’ icon again:

    Screen_Shot_2025-05-06_at_12_56_16_AM.png

  7. Search for 'Fletch’ and click on the ‘Fletch Drilldown Capability’:

    Screen_Shot_2025-05-06_at_1_02_11_AM.png

  8. You will see a ‘Fletch Drilldown Capability’ lozenge populated at the top of the prompt box:

    Screen Shot 2025-05-06 at 1.08.10 AM.png

  9. Let’s try getting more information about the 'RansomHub’ threat we saw in the Fletch Daily Report:

    Screen_Shot_2025-05-06_at_1_07_22_AM.png

    Screen Shot 2025-05-06 at 1.10.52 AM.png