Overview
Curriculum
Instructor
FAQs
Learn to detect, investigate and respond to threats with Microsoft Sentinel and Defender XDR and prepare for exam SC-200, leading to Microsoft Certified: Security Operations Analyst Associate. The course follows the official skills measured.
What you'll learn
- Configure Microsoft Sentinel and data ingestion
- Configure detections and automation
- Respond to incidents in Defender XDR and Defender for Endpoint
- Investigate Microsoft 365 activity
- Hunt for threats with KQL
Course outline
- Manage a Security Operations Environment (40–45%)
- Automation for Defender XDR and Sentinel
- Configure the Sentinel SIEM and platform
- Ingest data into Sentinel
- Configure detections
- Respond to Security Incidents (35–40%)
- Alerts and incidents in Defender XDR
- Alerts and incidents in Defender for Endpoint
- Investigate Microsoft 365 activities
- Perform Threat Hunting (20–25%)
- Hunt with Defender XDR
- Hunt with the Sentinel platform
MohamedAli
0 Students2436 Courses
No. The exam fee is paid separately to Microsoft.
Online with an instructor. The schedule is shared before the course starts.
Reviews
$250.00$200.00
Courses you might be interested in
Learn to administer Windows Server on-premises and in hybrid environments and prepare for exam AZ-802: Administering Windows Server. The course follows the official skills measured.
-
0 Lessons
$250.00$200.00
Learn to configure and manage Microsoft Teams and prepare for exam MS-700. The course follows the official skills measured.
-
0 Lessons
$250.00$200.00
Learn to extend Microsoft Power Platform with code and AI and prepare for exam AB-400 (successor to PL-400). The course follows the official AB-400 skills measured.
-
0 Lessons
$250.00$200.00
Learn the fundamentals of Microsoft Power Platform and prepare for exam PL-900.
-
0 Lessons
$250.00$200.00
$250.00$200.00