Single CVE Impact Assessment
The prompt
In Microsoft Defender XDR (Threat & Vulnerability Management), assess the organisation's exposure to [CVE ID]. Provide: 1. CVE description in plain language (two sentences maximum) 2. Affected software and versions 3. Number of devices in the environment running affected versions 4. List the top 10 most exposed devices (by exposure score or business criticality if available) 5. Is a patch or mitigation available? If yes, what is it? 6. Has this CVE been linked to active exploitation in the wild? Return as a one-page impact brief.
How to use it
- 1Select Copy the prompt above.
- 2Paste it into Microsoft 365 Copilot.
- 3Replace anything in brackets with your own detail, then send it.
Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.
Written for
Vulnerability Management Analyst, SOC Analyst
More for Microsoft Copilot for Security
- First Look — Incident Summary
- Alert Triage — Is This a True Positive?
- Multi-Alert Correlation — Single Incident Thread
- Device Investigation — Rapid Scope
From the source collection in awesome-microsoft-copilot-prompts, licensed CC BY-SA 4.0.