main
mdx 36 lines 1.42 KB
Raw
1 ---
2 title: Power features
3 description: Add-on capabilities that extend CoPilot beyond the core ingest→detect→respond loop.
4 ---
5
6 These features make CoPilot more powerful, but they’re not required for the initial SIEM bring-up.
7
8 If you’re still onboarding, start with the guided checklist: [Start here](/getting-started/start-here).
9
10 ---
11
12 ## How to think about power features
13
14 Power features usually fit into one of these buckets:
15
16 - **Exposure management** (patch/vuln posture)
17 - **Assessment** (cloud/web scanning outputs)
18 - **Reporting** (shareable artifacts)
19 - **Acceleration** (AI assistance)
20
21 They typically have additional inputs (connectors, permissions, targets) and should be rolled out after your core ingest→alerting path is healthy.
22
23 ---
24
25 ## Included modules
26
27 - [MITRE ATT&CK integration](/power-features/mitre-attack)
28 - [Microsoft Patch Tuesday](/power-features/patch-tuesday)
29 - [Cloud security assessment (Scout Suite)](/power-features/cloud-security-assessment)
30 - [Web vulnerability assessment (Nuclei)](/power-features/web-vulnerability-assessment)
31 - [GitHub audit](/power-features/github-audit)
32 - [AI analyst / AI-assisted investigation](/power-features/ai-analyst)
33 - [Atomic Red Team (detection simulation)](/power-features/atomic-red-team)
34 - [Report creation](/power-features/report-creation)
35 - [CoPilot Searches (threat hunting)](/power-features/copilot-searches)
36 - [SCA Policies (CIS benchmarks)](/power-features/sca-policies)