Understand how Project Perception coordinates security operations
Intermediate
Administrator
Security Engineer
Microsoft Defender XDR
Project Perception is Microsoft's agentic security system, accessed through the Agentic security section of the Microsoft Defender portal. Machine-paced attackers move faster than security teams can coordinate work across specialist boundaries. This module explains how Project Perception runs security operations as a coordinated, machine-speed workflow while humans stay in control of critical decisions, and gives you the recognition question that drives day-to-day tool choice: does this situation touch one area of work, or does it need a coordinated playbook across several?
Learning objectives
After completing this module, you will be able to:
- Explain why human-paced security operations struggle to keep up with machine-paced attackers
- Describe how coordinated multi-agent defense runs those tasks as one connected workflow, handled by Red, Blue, and Green team agents
- Map Project Perception's agents and playbooks onto that model
- Recognize when a situation calls for a Project Perception playbook by naming and counting the areas of work it touches
Prerequisites
- Day-to-day familiarity with security operations concepts such as alerts, investigations, threat intelligence, and vulnerability management
- High-level familiarity with the Microsoft Defender portal and Microsoft Defender XDR workflows
- Basic familiarity with AI agents that act on a user's behalf