Microsoft Security Operations Analyst

SC-200 | 4 days | €985All prices exclude VAT.

Learn how to investigate, respond to, and hunt for threats using Microsoft Azure Sentinel, Azure Defender, and Microsoft 365 Defender.

Overview

Learn how to investigate, respond to, and hunt for threats using Microsoft Azure Sentinel, Azure Defender, and Microsoft 365 Defender. In this course you will learn how to mitigate cyberthreats using these technologies. Specifically, you will configure and use Azure Sentinel as well as utilize Kusto Query Language (KQL) to perform detection, analysis, and reporting. The course was designed for people who work in a Security Operations job role and helps learners prepare for the exam SC-200: Microsoft Security Operations Analyst.

Part of the requirements for: Microsoft Certified Security Operations Analyst Associate

With Microsoft Certification, technology professionals are more likely to get hired, demonstrate clear business impact, and advance their careers.

What you’ll learn

Module 1: Introduction to Microsoft Defender XDR threat protection

Module 2: Mitigate incidents using Microsoft 365 Defender

Module 3: Protect your identities with Microsoft Entra ID Protection

Module 4: Remediate risks with Microsoft Defender for Office 365

Module 5: Safeguard your environment with Microsoft Defender for Identity

Module 6: Secure your cloud apps and services with Microsoft Defender for Cloud Apps

Module 7: Respond to data loss prevention alerts using Microsoft 365

Module 8: Manage insider risk in Microsoft Purview

Module 9: Describe Microsoft Copilot for Security

Module 10: Describe the core features of Microsoft Copilot for Security

Module 11: Describe the embedded experiences of Microsoft Copilot for Security

Module 12: Investigate threats by using audit features in Microsoft Defender XDR and Microsoft Purview Standard

Module 13: Investigate threats using audit in Microsoft Defender XDR and Microsoft Purview (Premium)

Module 14: Investigate threats with Content search in Microsoft Purview

Module 15: Protect against threats with Microsoft Defender for Endpoint

Module 16: Deploy the Microsoft Defender for Endpoint environment

Module 17: Implement Windows security enhancements with Microsoft Defender for Endpoint

Module 18: Perform device investigations in Microsoft Defender for Endpoint

Module 19: Perform evidence and entities investigations using Microsoft Defender for Endpoint

Module 20: Configure and manage automation using Microsoft Defender for Endpoint

Module 21: Configure for alerts and detections in Microsoft Defender for Endpoint

Module 22: Utilize Vulnerability Management in Microsoft Defender for Endpoint

Module 23: Plan for cloud workload protections using Microsoft Defender for Cloud

Module 24: Connect Azure assets to Microsoft Defender for Cloud

Module 25: Connect non-Azure resources to Microsoft Defender for Cloud

Module 26: Manage your cloud security posture management

Module 27: Explain cloud workload protections in Microsoft Defender for Cloud

Module 28: Remediate security alerts using Microsoft Defender for Cloud

Module 29: Remediate security alerts using Microsoft Defender for Cloud

Module 30: Construct KQL statements for Microsoft Sentinel, analyze query results using KQL, build multi-table statements using KQL

Module 31: Work with data in Microsoft Sentinel using Kusto Query Language

Module 32: Introduction to Microsoft Sentinel


Accreditation

ITCE is a Certified Microsoft Learning Partner.


Calendar

Frequently Asked Questions

Who should attend?

This course is for Microsoft Security Operations Analyst who investigates, responds to, and hunts for threats using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products. Since the Security Operations Analyst consumes the operational output of these tools, they are also a critical stakeholder in the configuration and deployment of these technologies.

Are there any prerequisites for this course?

  • Basic understanding of Microsoft 365
  • Fundamental understanding of Microsoft security, compliance, and identity products
  • Intermediate understanding of Windows 10
  • Familiarity with Azure services, specifically Azure SQL Database and Azure Storage
  • Familiarity with Azure virtual machines and virtual networking
  • Basic understanding of scripting concepts.

Your Certification Journey Awaits!

Get more information on how you can get certified through online proctored exam vouchers. Boost your career prospects now!

Register







    Once you submit your registration, we will get in touch with you to confirm your interest and attendance.

    By continuing to use the site, you agree to the use of cookies. more information

    The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.

    Close