Security Automation

Agents For Admins

Agents For Admins is a community-driven catalog of production-ready AI agents for Microsoft Security Copilot. This independent initiative helps security teams accelerate their operations by providing pre-built, vetted automation workflows that can be directly imported into Security Copilot. Eliminate the need to build workflows from scratch and leverage collective knowledge from thousands of IT professionals.

Key Features
Everything this tool offers to make your Intune management easier
Searchable catalog of production-ready agents
Easy YAML file import into Security Copilot
Agents for Defender, Entra, Intune, and Purview
Community contributions with review process
Transparent governance with source links
Clear inputs and outputs for each agent
Automated security workflows and investigations
Pre-built threat hunting and compliance agents
Common Use Cases
Real-world scenarios where this tool can help

Automated Threat Hunting

Deploy pre-built agents for CVE monitoring, threat detection, and security investigations across Defender XDR without building custom workflows.

Identity Governance

Automate access reviews, privilege monitoring, and identity risk assessments in Entra ID using community-tested agents.

Endpoint Security Automation

Streamline Intune device management, compliance monitoring, and security posture assessments with ready-to-use automation agents.

Requirements
What you need to get started with this tool
  • 1
    Access to Microsoft Security Copilot portal
  • 2
    Relevant Microsoft security products (Defender XDR, Entra, Intune, or Purview)
  • 3
    Required skillsets available in your environment
  • 4
    Appropriate permissions for agent deployment
Installation Steps
Follow these steps to install and configure the tool
  1. 1
    Visit agentsforadmins.com and browse the agent catalog
  2. 2
    Filter by your Microsoft service (Defender, Entra, Intune, Purview)
  3. 3
    Download the YAML file for your desired agent
  4. 4
    Open Microsoft Security Copilot portal at securitycopilot.microsoft.com
  5. 5
    Import the YAML file into your environment
  6. 6
    Validate prerequisites and required skillsets
  7. 7
    Test the agent with sample scenarios

Platform

Web

Hosting

Web

Status

Actively Maintained

Ready to get started?

Download or access Agents For Admins and start optimizing your Intune management today.