Tag Archives: microsoft
Exploring Copilot for Security to Automate Incident Triage
When speaking with Copilot for Security customers, automation is often brought up as a topic of exploration. Customers are eager to extend their existing SOAR investments or workflows to include Copilot because they recognize the capabilities this new technology brings and believe it has the potential to further increase productivity.
Today, Copilot for Security offers two ways of performing automations: 1) Promptbooks which are prompts chained together to achieve a specific task and 2) a LogicApp Connector to fuse the power of Copilot for Security directly into your workflows. In this post, we will explore how the LogicApp connector and set of capabilities could be leveraged to triage an incident––a common action taken by nearly every Security Operations Center (SOC).
Note: This post builds on the original release blog of the connector where a phishing email analysis was performed.
(SIEM + SOAR + GAI) = Next-Gen Automation
For this demonstration, I am going to use Microsoft Sentinel (SIEM) which includes access to LogicApps through the Automations and Playbook capabilities, and Copilot for Security. Included in the product are a set of curated Microsoft Promptbooks including one to triage a Sentinel incident. Running this within the standalone experience will give us a rough sense of what to expect and confidence we can emulate it within a LogicApp using our connector.
While this workflow does not touch on every aspect of incident triage, it provides a good foundation to operate from. Specifically, this logic will summarize the incident, collect any reputation data for a subset of indicators, identify authentication methods of identities impacted, list devices associated with those identities and their compliance status and write an executive report. I am going to keep the core prompts and extend a few to apply more specifically to Sentinel once within the playbook.
Within Sentinel, I can create a playbook from an incident trigger in the “Automations” section of the product.
Once set up, I can leverage the low-code/no-code editor to input my workflow. I’ve mimicked much of the promptbook using the Copilot for Security connector. Each step contains the prompt I plan to run and any context from the incident. Like the promptbooks, Copilot for Security will create a session for this playbook, so each prompt gets the benefit of the broader session context and is stored within the product for later analysis or reasoning.
Each of my prompts help to answer a common question an analyst may pose, but I still need to bring this information back into Sentinel. LogicApps offer a Sentinel connector that can be used to perform actions on our original incident. Here, I get creative in a few ways using generative AI. First, I leverage the session information and have Copilot attempt to classify the incident as “high”, “medium” or “low” based on all the information contained in the responses and force the model to return a label. This is fed into a switch statement which in turn updates the incident status and severity.
Next, I have Copilot for Security explain the reasoning behind the classification and output the data as a bullet point list. This output, paired with the session summary is used to create an HTML comment on the incident, giving an analyst a clear explanation of the steps that Copilot performed when triaging the incident and justification for the label.
Finally, I have Copilot suggest tags for the incident based again on the session information. These are used to tag the incident, adding a dynamic categorization element.
This playbook is configured to run on every incident generated in my workspace automatically. Here’s an example set of outputs where we can see the incident has been automatically classified as “high” severity, marked active, shows signs of a malicious IP and file download and includes the Copilot report as a comment. Naturally, there’s room for improvement on some of the outputs, but this can easily be done through basic prompt tuning.
Augmenting the Security Organization
At the end of last year, I briefly explored how SOAR could benefit from GAI. Notably, I called out natural language as processing instructions, influenced decision making, dynamic content and better human-in-the-loop features. This demonstration of triaging an incident hit on a lot of these categories:
Natural language questions to be answered about the incident, bridging multiple products and data sources.
Natural language responses summarized and “reasoned” over.
Dynamic content created in the form of a classification, tags and summary of the investigation performed.
Influenced decision making by using the model to suggest the severity based on the session content.
Better human-in-the-loop for the fact that this runs on every incident before an analyst needs to be involved.
Functionality like this will augment how security teams run their SOCs, especially as foundation models increase in their accuracy and capabilities. Imagine a world where Copilots are triaging every incident in full then using that information to inform a dynamic prioritization process in real-time. Incidents with clear evidence and decision-making data are automatically actioned and closed whereas ones requiring expert consultation are put into a Teams channel via a series of natural language questions posed by the model and answered by the analyst. In this new SOC, defenders are afforded more time to do more engaging and complex work to protect the organization.
Parting Thoughts
We are living in exciting times in security and IT operations. Generative AI is still rapidly forming and new discoveries are constantly being shared. I strongly encourage every professional and customer I speak with to explore this space, perform experiments and try out new ideas. The Copilot for Security team is constantly looking for new use cases and user feedback. This demonstration of triaging an incident is just one of many workflows we are working on and you should expect a whole lot more!
If you’re interested in replicating this automation or forming your own, check out our getting started documents for Copilot for Security. You can get up and running within minutes and deploy as little as a single Security Computer Unit (SCU). Also be sure to bookmark our Github repository filled with prompt starters, promptbooks and Logic Apps just like this one.
https://learn.microsoft.com/en-us/copilot/security/get-started-security-copilot
https://github.com/Azure/Copilot-For-Security
Microsoft Tech Community – Latest Blogs –Read More
Leading Successful Tech User Groups: Insights from MVPs
Leading a tech user group can be a challenging yet rewarding experience. In this article, we will explore the journey of a user group leader, from the initial challenges of growing the group to the key factors that contributed to its sustained growth and engagement.
We are highlighting Internet of Things and Microsoft Azure German MVP, Damir Dobric, AI United States MVP Adam Wisniewski, and Data Platform MVP Data Platform Bernat Agulló Roselló. By leveraging key factors such as support, coordination, planning, engagement, technology, and valuable content, Damir, Adam, and Bernat each overcame initial challenges and achieved sustained growth and engagement in the successful tech user groups they founded and led.
In founding and leading successful tech user groups, Damir, Adam, and Bernat each had their own unique experiences. Damir founded Azure Meetup Frankurt, the first Azure Group in Germany at the request of Scott Guthrie, while Bernat became a member of the Power BI Barcelona user group, in 2021. In 2023, he joined the organizers’ team benefiting from the knowledge of the attendees and the group. Meanwhile, Adam has been leading user groups, including Tampa XR, since 2018 and has always found them to be an excellent way to connect with like-minded individuals and learn from each other.
Power BI Barcelona user group
Every MVP found unique ways to grow their groups. Damir brought in people from the .NET User Group and various companies, while Bernat reached out through social media. Adam focused on making content his attendees would like. He learned that just creating a group doesn’t mean people will join. So, he made a plan to draw in and keep members interested, got extra help, and met different needs. Damir kept promoting cloud technology, even though it wasn’t popular at first due to data security concerns. His efforts paid off when Azure became widely used. Bernat started his group to keep in touch with past event-goers. To get more people, he invited Power BI users from Barcelona on LinkedIn with a message that got their attention.
MVP Damir Dobric
Leading a tech user group provided Damir, Adam, and Bernat with valuable learning experiences and personal growth. Damir relished the opportunity to network with influential professionals and enthusiasts, finding the reciprocal learning process enriching. Adam on the other hand, gained a great deal of knowledge from exploring topics in more depth, having rich discussions with members and thinking through ways to keep up with the ever-moving tech industry. While Bernat learned about the importance of teamwork, flexibility, and taking breaks while also building a motivated core team to lead the group.
Damir, Adam, and Bernat each shared their insights on nurturing a successful tech user group. Damir emphasized the importance of keeping the group engaged with high-quality, current information. Adam suggested focusing on a subject you’re passionate about and forming a dedicated team to manage events. He also highlighted the need for continuous member recruitment and the avoidance of overcommitment. Bernat advised establishing a committed core team to lead the group, advocating for shared leadership rather than solo efforts. He also underscored the significance of consistent member recruitment and the necessity of taking breaks when needed.
MVP Adam Wisniewski
In conclusion, leading a tech user group can be a challenging yet rewarding experience. The journey of a user group leader involves overcoming initial challenges, developing strategies for growth and engagement, and taking advantage of personal growth and learning opportunities. With the right approach, leading a tech user group can be a fulfilling and enriching experience.
Microsoft Tech Community – Latest Blogs –Read More
How to create Graphic with variable data (filtered)
Hi everybody,
I have an excel spreadsheet with all the sales forecast of 160 products. I have the quantity sold for each product every month for the last 5 years.
With graphics, I can see the sales forecast for each product. However, doing 160 graphics is too much for the Excel spreadsheet.
Therefore, I was wondering how to create just one graphic and by having a filter (with search bar for instance), I can select the product I want to see the trend and the graphic automatically just display the sales of this product?
How do to that?
Thank you so much for your help!
Hi everybody, I have an excel spreadsheet with all the sales forecast of 160 products. I have the quantity sold for each product every month for the last 5 years. With graphics, I can see the sales forecast for each product. However, doing 160 graphics is too much for the Excel spreadsheet. Therefore, I was wondering how to create just one graphic and by having a filter (with search bar for instance), I can select the product I want to see the trend and the graphic automatically just display the sales of this product? How do to that? Thank you so much for your help! Read More
How to assign co-owner to classwork/assignments in Teams for Education?
Hello,
Trying to utilize Teams to run an IT Training Program for my office, and I created a Class template Teams Team. I made some fellow colleagues as Owners of the team in hopes that they could also contribute other materials to the program, but since they are in different departments, they would also like to participate in the quizzes and assignments I’ve made for IT. Is there a way to assign classwork/assignments to other Owners?
Thanks
Hello, Trying to utilize Teams to run an IT Training Program for my office, and I created a Class template Teams Team. I made some fellow colleagues as Owners of the team in hopes that they could also contribute other materials to the program, but since they are in different departments, they would also like to participate in the quizzes and assignments I’ve made for IT. Is there a way to assign classwork/assignments to other Owners? Thanks Read More
Shared Dataset parameter default value automatically set as “=Nothing”
I create SSRS report using a shared dataset that has predefined parameters. When add the dataset to report, parameters are also get added automatically (as expected). Some of the parameters are optional parameters. For optional parameter, default value is automatically set as “Specify values” and expression “=Nothing”. Because of this, each time I edit and upload a new version of report the parameter value defaults to nothing. To keep the existing parameter value selection intact, I want the first option “No default value” to be selected by default. Please let know, if there is an option to have “No default value” selected by default instead of “Specify Values” combined with “=Nothing” at the time of adding a shared dataset to a report.
I create SSRS report using a shared dataset that has predefined parameters. When add the dataset to report, parameters are also get added automatically (as expected). Some of the parameters are optional parameters. For optional parameter, default value is automatically set as “Specify values” and expression “=Nothing”. Because of this, each time I edit and upload a new version of report the parameter value defaults to nothing. To keep the existing parameter value selection intact, I want the first option “No default value” to be selected by default. Please let know, if there is an option to have “No default value” selected by default instead of “Specify Values” combined with “=Nothing” at the time of adding a shared dataset to a report. Read More
Styles appear in different language / Styles Glitch
For some reason my Styles section is in a different language. This appears even in a new document. I’ve checked language settings and everything is set to English. The only way I have found that has fixed it is when I right click > Modify > Format > Font and make no other changes but just click okay (Font is set to Montserrat for body paragraph). It fixes it temperarily, but if I close the document and open Word again, the styles go back to the different language.
How do I permanently change this?
For some reason my Styles section is in a different language. This appears even in a new document. I’ve checked language settings and everything is set to English. The only way I have found that has fixed it is when I right click > Modify > Format > Font and make no other changes but just click okay (Font is set to Montserrat for body paragraph). It fixes it temperarily, but if I close the document and open Word again, the styles go back to the different language. How do I permanently change this? Read More
How to add rows based on qty value from another field with product tied to specific PO
Trying to add a number of rows with specific value based on a number of products. instead of having users circle the item. I want to have it automatically insert the product going down based on the qty field.
In this case need to find a way to have three rows with product “Fine” and 5 rows with product Flake.
Trying to add a number of rows with specific value based on a number of products. instead of having users circle the item. I want to have it automatically insert the product going down based on the qty field.In this case need to find a way to have three rows with product “Fine” and 5 rows with product Flake. Read More
Timeline for Copilot “auto-complete” feature
Does anyone know when this will be released?
This information comes from the microsoft blog – Copilot, but I have not found any information on when this new feature will be rolled out.
“If you’ve got the start of a prompt, Copilot will offer to auto-complete it to get to a better result, suggesting something more detailed to help ensure you get what you’re looking for. That not only speeds things up, it offers you new ideas for how to leverage Copilot’s power.”
Does anyone know when this will be released? This information comes from the microsoft blog – Copilot, but I have not found any information on when this new feature will be rolled out. “If you’ve got the start of a prompt, Copilot will offer to auto-complete it to get to a better result, suggesting something more detailed to help ensure you get what you’re looking for. That not only speeds things up, it offers you new ideas for how to leverage Copilot’s power.” Read More
Branding kit – product icons
I downloaded the Microsoft 365 branding kit from the Microsoft FastTrack web site as I’ve read that this is the only way to get access to the Microsoft 365 product icons. However, the branding kit only contains PDFs of the product icons, not actual graphic images. Is there a way to get the actual images?
I downloaded the Microsoft 365 branding kit from the Microsoft FastTrack web site as I’ve read that this is the only way to get access to the Microsoft 365 product icons. However, the branding kit only contains PDFs of the product icons, not actual graphic images. Is there a way to get the actual images? Read More
Using Microsoft Viva Pulse and Glint for Employee Reviews – 30, 60, 90 & Biannual Reviews
Hi MS Viva Community,
I have been looking into Microsoft Viva across the board, but specifically looking at Pulse and Glint as a solution for deploying and tracking employee reviews. We have been using a combination of Forms, Excel and BI to carry out this process. I’m working if Pulse and Glint can be a cleaner more turnkey solution than what we have been doing.
Hi MS Viva Community, I have been looking into Microsoft Viva across the board, but specifically looking at Pulse and Glint as a solution for deploying and tracking employee reviews. We have been using a combination of Forms, Excel and BI to carry out this process. I’m working if Pulse and Glint can be a cleaner more turnkey solution than what we have been doing. Read More
Remove SP list columns from search results
I have created an employee directory in a SharePoint list. Currently, when I search the list using my name all records are returned since I created the records. I would like to remove the “Created by” and “Modified by” columns from the search results so that when someone searches for me all records are not returned. I’m looking for a solution that can be applied at the site level as I do not want to change the default behavior for other sites in the tenant.
I have created an employee directory in a SharePoint list. Currently, when I search the list using my name all records are returned since I created the records. I would like to remove the “Created by” and “Modified by” columns from the search results so that when someone searches for me all records are not returned. I’m looking for a solution that can be applied at the site level as I do not want to change the default behavior for other sites in the tenant. Read More
Hibernation support now available for Azure Virtual Desktop
Today we are happy to announce the general availability of hibernation support in Azure Virtual Desktop. Explore additional capabilities that make it easier to save compute costs for your idle resources.
Hibernation support in Azure Virtual Desktop
In November 2023, we announced the public preview of hibernation support in Azure Virtual Desktop. Hibernating a session host virtual machine (VM) deallocates the machine while persisting the VM’s in-memory state. When a VM hibernates, you don’t pay for the compute cost associated with the VM. Instead you pay only for the storage and networking costs associated with the VM. When the session host virtual machine starts, the user will be able to quickly resume from where they left off.
The following capabilities are now generally available in Azure Virtual Desktop:
Hibernation can be enabled for session host VMs deployed to personal host pools.
Hibernation can be chosen as the scaling action for disconnect or logoff for personal host pools. For more details about configuring personal scaling plan, see Create a scaling plan.
These capabilities are available in addition to those released during the public preview, which included the following:
Hibernation can be enabled on existing session host VMs.
Resize is supported for session host VMs with hibernation enabled.
Hibernation support extended to more VM sizes and series.
Getting started
You can enable hibernation when deploying session host VMs for your personal host pools using Azure Portal, PowerShell, CLI, ARM, SDKs, and APIs. You can enable hibernation for existing VMs using PowerShell, CLI, ARM, SDKs, and APIs.
To enable hibernation in your scaling plan, you will need to:
Create a personal scaling plan.
Define whether to enable or disable Start VM on Connect.
Choose to perform hibernation after a user session has been disconnected or logged off for a configurable period of time.
Assign a personal scaling plan to one or more personal host pools.
Helpful resources
We encourage you to learn more about setting up autoscale and review frequently asked questions for more details on how to use hibernation with autoscale for Azure Virtual Desktop personal host pools. You may also find these resources helpful:
Microsoft Mechanics: Automated scaling, imaging & monitoring
Azure Academy: Enabling and managing Personal Desktop Autoscale
Cost Optimization for General Purpose VMs using Hibernation now Generally Available
Microsoft Tech Community – Latest Blogs –Read More
Defender For Endpoint MacOS Scheduled Scan documentation error
Hi everybody!
First post here so I hope it goes to the right place. I´m configuring Defender for Endpoint on MacOS scheduled scans and found out that the examples in the documentation have errors. I got the “XML must be well formed” error and noticed that there were some end tags missing.
There is an error in the example XML files: How to schedule scans with Microsoft Defender for Endpoint on macOS – Microsoft Defender for Endpoint | Microsoft Learn
If anyone else is banging their head on the wall. The fix is to add end tag to the “array” part and a few “dict” end tags.
Hi everybody! First post here so I hope it goes to the right place. I´m configuring Defender for Endpoint on MacOS scheduled scans and found out that the examples in the documentation have errors. I got the “XML must be well formed” error and noticed that there were some end tags missing. There is an error in the example XML files: How to schedule scans with Microsoft Defender for Endpoint on macOS – Microsoft Defender for Endpoint | Microsoft Learn If anyone else is banging their head on the wall. The fix is to add end tag to the “array” part and a few “dict” end tags. Read More
Error after windows server update
Receiving error after installing updates – KB 5027283
System.InvalidOperationException: Operation is not valid due to the current state of the object.
Some site collections work and central admin works.
The updates ran successfully, SharePoint wizard ran successfully after updates, rebooted. Single server set up.
Anyone have any idea what’s wrong?
Receiving error after installing updates – KB 5027283 System.InvalidOperationException: Operation is not valid due to the current state of the object. Some site collections work and central admin works.The updates ran successfully, SharePoint wizard ran successfully after updates, rebooted. Single server set up.Anyone have any idea what’s wrong? Read More
Individuals Content in rows to two columns
I need to pull only names and emails from these rows (each person has 25 rows) and transverse them into two columns to just have the name and emails listed. Any ideas?
I need to pull only names and emails from these rows (each person has 25 rows) and transverse them into two columns to just have the name and emails listed. Any ideas? Read More
Will people I temporarily call into a teams meeting have access to the transcript after they leave?
Wondering if people who are called into a meeting temporarily (e.g. to present on a topic) will have access to the transcript. They are not invited to the meeting, just called in when needed. I know I can cancel them from the chat after they leave, but if I don’t do this will they still have access to the transcript after they leave? It’s a concern as discussions following their departure from the meeting may be confidential.
Wondering if people who are called into a meeting temporarily (e.g. to present on a topic) will have access to the transcript. They are not invited to the meeting, just called in when needed. I know I can cancel them from the chat after they leave, but if I don’t do this will they still have access to the transcript after they leave? It’s a concern as discussions following their departure from the meeting may be confidential. Read More
Disable Copilot on Mac
How do I disable Copilot on my Macbook Pro? I absolutely detest it.
How do I disable Copilot on my Macbook Pro? I absolutely detest it. Read More
Lesson Learned #497:Understanding the Ordering of uniqueidentifier in SQL Server
Today, I worked on a service request that our customer asked about how SQL Server sorts the uniqueidentifier data type. We know that uniqueidentifier store globally unique identifiers (GUIDs). GUIDs are widely used for unique keys due to their extremely low probability of duplication. One common method to generate a GUID in SQL Server is by using the NEWID() function. However, the ordering of GUIDs, especially those generated by NEWID(), can appear non-intuitive. I would like to share my lessons learned how to determine the ordering method using uniqueidentifier and NEWID().
We know that a GUID is a 16-byte value typically represented in a standard format of 32 hexadecimal characters separated by hyphens, for example, EB37F277-8A16-4DE3-B1E3-FFFCBA956A82.
Each section represents different parts of the GUID:
The first 8 characters (4 bytes)
The next 4 characters (2 bytes)
The following 4 characters (2 bytes)
The next 4 characters (2 bytes)
The final 12 characters (6 bytes)
When we generated a NEWID() function generates a random GUID. This randomness ensures uniqueness but can lead to seemingly arbitrary ordering when GUIDs are compared and sorted. The comparison is done byte-by-byte from left to right in lexicographical order.
Consider the following GUIDs generated by NEWID():
C2EB258A-147F-4F26-97D7-0000F053CCA8
6682BC4F-949E-478F-BBA2-0003C71CD035
A6D423B8-07F3-4F13-B34E-0004DC3317B7
EE2C394E-7AB0-468F-B959-0005C0CC598D
How the ordering works:
To understand how SQL Server orders these GUIDs, we need to break them down into their binary components and compare each part:
C2EB258A-147F-4F26-97D7-0000F053CCA8
Binary: C2 EB 25 8A 14 7F 4F 26 97 D7 00 00 F0 53 CC A8
6682BC4F-949E-478F-BBA2-0003C71CD035
Binary: 66 82 BC 4F 94 9E 47 8F BB A2 00 03 C7 1C D0 35
A6D423B8-07F3-4F13-B34E-0004DC3317B7
Binary: A6 D4 23 B8 07 F3 4F 13 B3 4E 00 04 DC 33 17 B7
EE2C394E-7AB0-468F-B959-0005C0CC598D
Binary: EE 2C 39 4E 7A B0 46 8F B9 59 00 05 C0 CC 59 8D
When these GUIDs are ordered, SQL Server compares each byte in sequence. The final sorted order is:
6682BC4F-949E-478F-BBA2-0003C71CD035
A6D423B8-07F3-4F13-B34E-0004DC3317B7
C2EB258A-147F-4F26-97D7-0000F053CCA8
EE2C394E-7AB0-468F-B959-0005C0CC598D
To better understand and work with GUIDs, you can create SQL functions that decompose GUIDs into their components and show their ordering. To understand how the GUID is decomposed I would like to share this function.
CREATE FUNCTION dbo.DescomponerGUIDString (@guid UNIQUEIDENTIFIER)
RETURNS NVARCHAR(100)
AS
BEGIN
DECLARE @part1 NVARCHAR(8) = CONVERT(NVARCHAR(8), SUBSTRING(CONVERT(BINARY(16), @guid), 1, 4), 2);
DECLARE @part2 NVARCHAR(4) = CONVERT(NVARCHAR(4), SUBSTRING(CONVERT(BINARY(16), @guid), 5, 2), 2);
DECLARE @part3 NVARCHAR(4) = CONVERT(NVARCHAR(4), SUBSTRING(CONVERT(BINARY(16), @guid), 7, 2), 2);
DECLARE @part4 NVARCHAR(4) = CONVERT(NVARCHAR(4), SUBSTRING(CONVERT(BINARY(16), @guid), 9, 2), 2);
DECLARE @part5 NVARCHAR(12) = CONVERT(NVARCHAR(12), SUBSTRING(CONVERT(BINARY(16), @guid), 11, 6), 2);
RETURN @part1 + ‘-‘ + @part2 + ‘-‘ + @part3 + ‘-‘ + @part4 + ‘-‘ + @part5;
END;
For example, we have this table and we are going to sort using the [Guid No_] column with NewID().
select [GUID No_], dbo.DescomponerGUIDString([GUID No_]) as x from dbo.ExampleTable
ORDER BY 1
For example, we have this table and we are going to sort using the sorted calculation column with NewID().
select [GUID No_], dbo.DescomponerGUIDString([GUID No_]) as x from dbo.ExampleTable
ORDER BY 2
Microsoft Tech Community – Latest Blogs –Read More
MS Project Online API to read calendar information
Hi,
I’m trying to retrieve calendar details from MS Project Online using a calendar ID.
I’m currently using this endpoint to get the calendar information:
https://<sitecollection>/<site>/pwa/_api/ProjectServer/Calendars(‘calendarid’)
However, this endpoint does not provide information about holidays and working days in a week.
Is there an API that can fetch all this data?
Thank you.
Hi,I’m trying to retrieve calendar details from MS Project Online using a calendar ID.I’m currently using this endpoint to get the calendar information:https://<sitecollection>/<site>/pwa/_api/ProjectServer/Calendars(‘calendarid’)However, this endpoint does not provide information about holidays and working days in a week.Is there an API that can fetch all this data?Thank you. Read More
Conditional Formatting 3 Colour options
Has anyone any guidance on how I can use Conditional formatting to do the following:
Compare a value in a cell to another cell and provide a red amber green fill based on being greater than, Equal to or lower than the cell it is compared to. I want to do this to a range of cells where the value may be different in each cell and is being compared to a different cell in eache instance (example below:
Reference cell – 3 4 5 3 5 3 4
Value – 3 5 4 2 5 5 7
Fill Colour – A R G G A R R
The only was I have foud to do this so far is 3 conditional formatting formulas per cell (using formula for < = >) and I then cant copy all 3 rules to the other cells as the cell references are fixed ($B$3)
Thanks
Has anyone any guidance on how I can use Conditional formatting to do the following: Compare a value in a cell to another cell and provide a red amber green fill based on being greater than, Equal to or lower than the cell it is compared to. I want to do this to a range of cells where the value may be different in each cell and is being compared to a different cell in eache instance (example below: Reference cell – 3 4 5 3 5 3 4 Value – 3 5 4 2 5 5 7 Fill Colour – A R G G A R R The only was I have foud to do this so far is 3 conditional formatting formulas per cell (using formula for < = >) and I then cant copy all 3 rules to the other cells as the cell references are fixed ($B$3) Thanks Read More