Microsoft Enhances Defender With Centralized Library Management

Microsoft on Tuesday unveiled centralized library management for live response within Microsoft Defender, integrated with Microsoft Security Copilot. The feature lets SOC teams pre-upload PowerShell scripts, batch files, and tools, preview contents, and use Copilot to analyze scripts and surface behavior and execution risk. Microsoft says the enhancement improves SOC readiness and reduces time between threat detection and remediation.