Resolve syncing conflicts from repo_sync_working_branch to main

.openpublishing.publish.config.json

@@ -45,6 +45,12 @@
       "url": "https://github.com/MicrosoftDocs/reusable-content",
       "branch": "main",
       "branch_mapping": {}
+    },
+    {
+      "path_to_root": "security-docs/includes/entra-content",
+      "url": "https://github.com/MicrosoftDocs/entra-docs-pr",
+      "branch": "main",
+      "branch_mapping": {}
     }
   ],
   "branch_target_mapping": {

.openpublishing.redirection.json

@@ -1,5 +1,15 @@
 {
   "redirections": [
+    {
+      "source_path": "security-docs/zero-trust/siem-xdr-training.md",
+      "redirect_url": "security/zero-trust/security-adoption-discipline-architecture-tips",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "security-docs/zero-trust/ten-laws-of-security.md",
+      "redirect_url": "security/zero-trust/security-adoption-discipline-security-operations",
+      "redirect_document_id": false
+    },
     {
       "source_path": "security-docs/zero-trust/zero-trust-assessment-progress-tracking-resources.md",
       "redirect_url": "security/zero-trust/assessment/get-started",

security-docs/docfx.json

@@ -47,8 +47,8 @@
       "breadcrumb_path": "/security/breadcrumb/toc.json",
       "feedback_system": "Standard",
       "feedback_help_link_type": "get-help-at-qna",
-      "ms.author": "kenwith",
-      "author": "kenwith"
+      "ms.author": "raynew",
+      "author": "rayne-wiselman"
     },
     "fileMetadata": {
       "titleSuffix": {

security-docs/index.yml

@@ -8,7 +8,7 @@ metadata:
   ms.topic: marketing-hub
   ms.author: saadad
   author: sadadow
-  ms.date: 05/05/2026
+  ms.date: 04/06/2026
   ms.collection: # na
   brand: azure
 sections:
@@ -81,34 +81,67 @@ sections:
     title: ""
     blocks:
       - componentType: icon-card
-        title: Secure autonomous agentic AI systems
-        summary: Apply solutions to operationalize mitigation across identity, governance, runtime enforcement, and detection.
-        url: /security/zero-trust/sfi/secure-agentic-systems
+        title: Enable Defender for AI Services workload protection in Microsoft Defender for Cloud
+        summary: Enable and configure the Defender for AI Services plan in Microsoft Defender for Cloud to detect threats targeting Azure AI services workloads.
+        url: /training/modules/implement-defender-cloud-ai-services/
+        icon:
+          componentType: image
+          src: /security/media/hubpage/ignite-glyphs/training-1-purple.png
+      - componentType: icon-card
+        title: Assess data security posture in Microsoft Purview
+        summary: Work with Microsoft Purview Data Security Posture Management to protect your data.
+        url: /training/modules/purview-dspm-assess-data-security-posture/ 
+        icon:
+          componentType: image
+          src: /security/media/hubpage/ignite-glyphs/tutorial-1-purple.png
+      - componentType: icon-card
+        title: Generate playbooks using AI in Microsoft Sentinel
+        summary: Learn how to generate playbooks by using AI, configure required integrations, and deploy your automation workflows.
+        url: /azure/sentinel/automation/generate-playbook
+        icon:
+          componentType: image
+          src: /security/media/hubpage/ignite-glyphs/how-to-guide-2-orange.png
+      - componentType: icon-card
+        title: Apply data security and compliance to Microsoft Agent 365
+        summary: Use Microsoft Purview to manage data security & compliance for Microsoft Agent 365.
+        url: /purview/ai-agent-365
         icon:
           componentType: image
           src: /security/media/hubpage/ignite-glyphs/concept-1-yellow.png
+
+# Put security into practice
+  - componentType: grid
+    title: Put security into practice
+    summary: Move from reading to improving your security posture. Explore practice-based quickstarts, tutorials, and guided modules that help you deploy, configure, and validate protections with Microsoft Security—so you can make meaningful progress in your environment, one focused step at a time.
+    blocks:
       - componentType: icon-card
-        title: "Quickstart: Build agents using MCP tools (Security Copilot)"
-        summary: Build a Security Copilot agent that calls MCP tools — quickstart with sample code.
-        url: /copilot/security/developer/mcp-quickstart
+        title: "Quickstart: Helm install for Defender for Containers"
+        summary: Deploy the Defender for Containers sensor with Helm.
+        url: /azure/defender-for-cloud/deploy-helm
         icon:
           componentType: image
           src: /security/media/hubpage/ignite-glyphs/quickstart-2-rainbow.png
       - componentType: icon-card
-        title: AI Agent Service Security Controls
+        title: "Tutorial: Defender for Cloud + GHAS sandbox"
+        summary: Try Defender for Cloud +GHAS in a sandbox before you roll it out.
+        url: /azure/defender-for-cloud/github-advanced-security-deploy-sandbox
+        icon:
+          componentType: image
+          src: /security/media/hubpage/ignite-glyphs/tutorial-1-purple.png
+      - componentType: icon-card
+        title: "Module: AI Agent Service Security Controls"
         summary: Configure RBAC and security controls for Azure AI Agent Service in this 20-minute module.
         url: /training/modules/intro-ai-agent-service-security-controls/
         icon:
           componentType: image
           src: /security/media/hubpage/ignite-glyphs/training-1-purple.png
       - componentType: icon-card
-        title: Get In the Loop
-        summary: Catch up on the latest product drops, security updates, and demos—all in one place.
-        url: https://aka.ms/SecurityProductDrops_May26
+        title: "Documentation: Security Analyst Agent in Defender"
+        summary: Investigate with the Security Analyst Agent to quickly identify, assess, and prioritize risks.
+        url: /defender-xdr/security-analyst-agent
         icon:
           componentType: image
-          src: /security/media/hubpage/ignite-glyphs/whats-new-1-magenta.png
-
+          src: /security/media/hubpage/ignite-glyphs/how-to-guide-2-orange.png
 
 # Modules
 #  - componentType: cards
@@ -160,28 +193,28 @@ sections:
         url: /training/paths/ai-security-fundamentals/?wt.mc_id=securityhub_fundamentals_webpage_sci
         icon:
           componentType: image
-          src: /security/media/hubpage/generic-trophy.svg
+          src: /security/media/hubpage/ignite-glyphs/training-1-purple.png
       - componentType: icon-card
         title: Understand data security investigations
         summary: Learn concepts that define data security investigations, how they differ from alerts and audit, and when deeper, data-focused investigation adds value to security decisions.
         url: /training/modules/purview-data-security-investigations-understand/?wt.mc_id=securityhub_securityinvestigations_webpage_sci
         icon:
           componentType: image
-          src: /security/media/hubpage/generic-badge.svg
+          src: /security/media/hubpage/ignite-glyphs/tutorial-1-purple.png
       - componentType: icon-card
         title: Mitigate incidents using Microsoft Defender
         summary: Investigate and respond to incidents using Microsoft Sentinel and Defender XDR. Correlate alerts, hunt threats, manage incidents, and stop attacks faster with unified security operations workflows.
         url: /training/modules/mitigate-incidents-microsoft-365-defender/?wt.mc_id=securityhub_defendertraining_webpage_sci
         icon:
           componentType: image
-          src: /security/media/hubpage/training-clipboard.png
+          src: /security/media/hubpage/ignite-glyphs/reference-2-yellow.png
       - componentType: icon-card
         title: Plan, implement, and administer Conditional Access
         summary: Conditional Access gives a fine granularity of control over which users can do specific activities, access which resources, and how to ensure data and systems are safe.
         url: /training/modules/plan-implement-administer-conditional-access//?wt.mc_id=securityhub_conditionalaccess_webpage_sci
         icon:
           componentType: image
-          src: /security/media/hubpage/training-whiteboard.png
+          src: /security/media/hubpage/ignite-glyphs/concept-1-yellow.png
 
 # Microsoft Security product documentation 
   - componentType: grid

security-docs/security-for-ai/TOC.yml

@@ -4,6 +4,8 @@
   items:
     - name: What's new for AI security?
       href: whats-new.md
+    - name: Responsible AI
+      href: transparency-application-cards-security.md
     - name: Build a strong security posture for AI
       href: posture.md
     - name: Prepare for AI security

security-docs/security-for-ai/transparency-application-cards-security.md

@@ -0,0 +1,48 @@
+---
+title: "Application cards: Transparency documentation for Microsoft AI security products"
+description: Application cards for Microsoft AI security products, including Microsoft Security Copilot, Microsoft Purview, Microsoft Defender, and Microsoft Sentinel.
+ms.service: security
+ms.subservice: security-for-ai
+ms.date: 06/17/2026
+author: cabailey
+ms.author: cabailey
+ms.topic: overview
+ms.collection:
+  - msftsolution-security-for-ai
+  - msec-ai-copilot
+ai-usage: ai-assisted
+---
+
+# Transparency documentation for Microsoft AI security products
+
+Application cards provide transparency into how Microsoft's AI-powered applications work. Each card covers the application's intended uses, capabilities, limitations, and the choices that influence its performance and behavior.
+
+These resources support Microsoft's commitment to [responsible AI principles](https://www.microsoft.com/ai/principles-and-approach/) by providing the information you need to evaluate, deploy, and use AI applications in your environment.
+
+## Microsoft Security Copilot
+
+| Application card | Description |
+|---|---|
+| [Microsoft Security Copilot](/copilot/security/rai-faqs-security-copilot) | Covers the generative AI-powered security assistant that helps defenders investigate incidents, analyze threats, and manage security posture using natural language. |
+| [Microsoft Security Copilot Agents](/copilot/security/rai-faqs-security-copilot-agents) | Describes autonomous AI agents that triage alerts, remediate vulnerabilities, and perform proactive security tasks across Defender, Microsoft Purview, Entra, and Intune. |
+
+## Microsoft Purview
+
+| Application card | Description |
+|---|---|
+| [Microsoft Purview Data Security Posture Management](/purview/data-security-posture-management-application-card) | Explains how AI identifies and surfaces data security risks to help organizations understand and improve their sensitive data protection. |
+| [Microsoft Purview Data Security Investigations](/purview/data-security-investigations-application-card) | Details the AI capabilities that accelerate investigation of data security incidents involving sensitive information. |
+| [Microsoft Purview Unified Catalog](/purview/unified-catalog-application-card) | Documents the AI features that automate data discovery, classification, and governance across your organization's data estate. |
+
+## Microsoft Defender
+
+| Application card | Description |
+|---|---|
+| [Microsoft Copilot in Defender](/defender-xdr/application-card-copilot-defender) | Addresses the embedded AI experience in Microsoft Defender XDR that assists security analysts with incident summarization, guided response, and threat analysis. |
+
+## Microsoft Sentinel
+
+| Application card | Description |
+|---|---|
+| [Microsoft Sentinel SIEM](/azure/sentinel/sentinel-siem-application-card) | Details the AI-driven capabilities that support threat detection, investigation, response, and proactive hunting across multicloud environments. |
+| [Microsoft Sentinel MCP server](/azure/sentinel/datalake/sentinel-mcp-application-card) | Covers the AI capabilities of the Model Context Protocol server that enables natural language interaction with Microsoft Sentinel data. |

security-docs/security-resources/featured-top-picks.md

@@ -5,13 +5,22 @@ ms.service: security
 ms.topic: whats-new
 author: ttorble
 ms.author: ralyon
-ms.date: 05/05/2026
+ms.date: 04/06/2026
 ---
 
 # Featured top picks
 
 This article brings together the history of top picks from the Security hub organized by publication date in descending order. Explore a curated selection of noteworthy security content to inspire your security learning journey.
 
+## May 2026
+
+| Featured date  | Title  | Description  |
+|---------|---------|---------|
+| May 5   | [Secure autonomous agentic AI systems](/security/zero-trust/sfi/secure-agentic-systems) | Apply solutions to operationalize mitigation across identity, governance, runtime enforcement, and detection. |
+|         | [Quickstart: Build agents using MCP tools (Security Copilot)](/copilot/security/developer/mcp-quickstart) | Build a Security Copilot agent that calls MCP tools — quickstart with sample code. |
+|         | [AI Agent Service Security Controls](/training/modules/intro-ai-agent-service-security-controls/) | Configure RBAC and security controls for Azure AI Agent Service in this 20-minute module. |
+|         | [Get In the Loop](https://aka.ms/SecurityProductDrops_May26) | Catch up on the latest product drops, security updates, and demos—all in one place. |
+
 ## April 2026
 | Featured date  | Title  | Description  |
 |---------|---------|---------|

security-docs/security-resources/index.yml

@@ -10,7 +10,7 @@ metadata:
   ms.topic: landing-page
   ms.author: ralyon
   author: ttorble
-  ms.date: 05/05/2026
+  ms.date: 04/06/2026
 
 # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | tutorial | overview | quickstart | reference | sample | tutorial | video | whats-new
 
@@ -19,30 +19,30 @@ landingContent:
 # Start card title with a verb
   # Card 
     # Card 
-  - title: April top picks
+  - title: May top picks
     linkLists:
       - linkListType: overview
         links:
-          - text: Secure AI solutions in the cloud
-            url: /credentials/applied-skills/secure-ai-solutions-in-the-cloud/
-          - text: Learn about Security Copilot agents
-            url: /copilot/security/security-copilot-inclusion?wt.mc_id=securityhub_inclusion_webpage_sci
-          - text: Configure your Microsoft Sentinel Environment
-            url: /training/paths/sc-200-configure-azure-sentinel-environment/
-          - text: "Build security skills: Download the kit"
-            url: https://aka.ms/SecuritySkillingKit?wt.mc_id=lfo_content_webpage_wwl   
-  - title: March top picks
+          - text: Secure autonomous agentic AI systems
+            url: /security/zero-trust/sfi/secure-agentic-systems
+          - text: "Quickstart: Build agents using MCP tools (Security Copilot)"
+            url: /copilot/security/developer/mcp-quickstart
+          - text: AI Agent Service Security Controls
+            url: /training/modules/intro-ai-agent-service-security-controls/
+          - text: Get In the Loop
+            url: https://aka.ms/SecurityProductDrops_May26
+  - title: April top picks
     linkLists:
       - linkListType: overview
         links:
           - text: Secure AI solutions in the cloud
             url: /credentials/applied-skills/secure-ai-solutions-in-the-cloud/
-          - text: Join Azure Decoded on April 8th
-            url: https://developer.microsoft.com/en-us/reactor/events/26862/
           - text: Learn about Security Copilot agents
             url: /copilot/security/security-copilot-inclusion?wt.mc_id=securityhub_inclusion_webpage_sci
           - text: Configure your Microsoft Sentinel Environment
             url: /training/paths/sc-200-configure-azure-sentinel-environment/
+          - text: "Build security skills: Download the kit"
+            url: https://aka.ms/SecuritySkillingKit?wt.mc_id=lfo_content_webpage_wwl   
 
  # Card
  # - title: Discover more