Skip to main content
These features make CoPilot more powerful, but they’re not required for the initial SIEM bring-up. If you’re still onboarding, start with the guided checklist: Start here.

How to think about power features

Power features usually fit into one of these buckets:
  • Exposure management (patch/vuln posture)
  • Assessment (cloud/web scanning outputs)
  • Reporting (shareable artifacts)
  • Acceleration (AI assistance)
  • Detection (behavioral analytics beyond single-event rules)
  • SOC operations (SLA, performance and service reporting)
They typically have additional inputs (connectors, permissions, targets) and should be rolled out after your core ingest→alerting path is healthy.

Included modules