<aside> 💡 To solve the cold start problem inside of Microsoft Security Copilot, take a couple minutes to connect Microsoft Defender and any other tools you use. Fletch will prioritize the active alerts in your EDR and vulnerability scanners and give you advice for humans and AI agents to act on.

</aside>

https://youtu.be/MZl7Jh3R32M

Connect Microsoft Defender or other alert scanners & EDR tools

Overview

When you connect Microsoft Defender or other vulnerability scanners or EDR tools, Fletch processes the alert data.

Fletch extracts the CVEs from your vulnerability scanner alerts and the file hashes from your EDR alerts, along with the resource names associated with each.

The Fletch AI will correlate the CVEs (Hashes) to threat data in order to identify which of these are associated with threats that are timely and actionable.

From these CVEs and their associated resources, Fletch will generate prioritized task lists: use these lists to focus your threat management efforts and get the meta details needed to send mitigation orders to AI agents.

How to connect

If you haven’t connected anything yet

1. Choose the integration you want to connect directly from within Prioritized alerts
2. Follow the steps in the corresponding Connection Guide.

If you want to connect a second integration

1. Go to the Integrations page (find the shortcut in the main menu, bottom left hand side of Fletch)
2. Choose the integration you want to connect on the next screen, and follow the instructions in the Connection Guide.

Add your tags

Once you’ve connected your integrations, you will want to add tags in order to forecast threats and generate advice that’s relevant for you.