SC-200T00: Defend against cyberthreats with Microsoft's security operations platform

About this course

Learn how to investigate, respond to, and hunt for threats using Microsoft Sentinel, Microsoft Defender XDR and Microsoft Defender for Cloud. In this course you will learn how to mitigate cyberthreats using these technologies. Specifically, you will configure and use Microsoft Sentinel as well as utilize Kusto Query Language (KQL) to perform detection, analysis, and reporting. The course was designed for people who work in a Security Operations job role and helps learners prepare for the exam SC-200: Microsoft Security Operations Analyst. Audience Profile The Microsoft Security Operations Analyst collaborates with organizational stakeholders to secure information technology systems for the organization. Their goal is to reduce organizational risk by rapidly remediating active attacks in the environment, advising on improvements to threat protection practices, and referring violations of organizational policies to appropriate stakeholders. Responsibilities include threat management, monitoring, and response by using a variety of security solutions across their environment. The role primarily investigates, responds to, and hunts for threats using Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender for Cloud, and third-party security products. Since the Security Operations Analyst consumes the operational output of these tools, they are also a critical stakeholder in the configuration and deployment of these technologies.

Instructor-led training for professionals and companies in Chile. Request dates, schedules, seats and commercial terms. Training hours and daily scheduling follow Netsolutions planning and are confirmed in the commercial proposal.

Course syllabus

1. Mitigate threats using Microsoft Defender XDR
2. Introduction to Microsoft Defender XDR threat protection
3. Mitigate incidents using Microsoft Defender
4. Remediate threats using Microsoft Defender
5. Manage Microsoft Entra Identity Protection
6. Safeguard your environment with Microsoft Defender for Identity
7. Secure your cloud apps and services with Microsoft Defender for Cloud Apps
8. Mitigate threats using Microsoft Security Copilot
9. Introduction to generative AI and agents
10. Describe Microsoft Security Copilot
11. Describe the core features of Microsoft Security Copilot
12. Describe the embedded experiences of Microsoft Security Copilot
13. Experience Security Copilot through guided simulations
14. Mitigate threats using Microsoft Purview
15. Investigate and respond to Microsoft Purview Data Loss Prevention alerts
16. Investigate insider risk alerts and related activity
17. Conduct investigations with Microsoft Purview Audit
18. Search for content with Microsoft Purview eDiscovery
19. Mitigate threats using Microsoft Defender for Endpoint
20. Protect against threats with Microsoft Defender for Endpoint
21. Deploy the Microsoft Defender for Endpoint environment
22. Implement Windows security enhancements with Microsoft Defender for Endpoint
23. Perform device investigations in Microsoft Defender for Endpoint
24. Perform actions on a device using Microsoft Defender for Endpoint
25. Perform evidence and entities investigations using Microsoft Defender for Endpoint
26. Configure and manage automation using Microsoft Defender for Endpoint
27. Configure for alerts and detections in Microsoft Defender for Endpoint
28. Utilize Vulnerability Management in Microsoft Defender for Endpoint
29. Mitigate threats using Microsoft Defender for Cloud
30. Plan for cloud workload protections using Microsoft Defender for Cloud
31. Connect Azure assets to Microsoft Defender for Cloud
32. Connect non-Azure resources to Microsoft Defender for Cloud
33. Manage your cloud security posture management​
34. Explain cloud workload protections in Microsoft Defender for Cloud
35. Remediate security alerts using Microsoft Defender for Cloud
36. Create queries for Microsoft Sentinel using Kusto Query Language (KQL)
37. Construct KQL statements for Microsoft Sentinel
38. Analyze query results using KQL
39. Build multi-table statements using KQL
40. Work with data in Microsoft Sentinel using Kusto Query Language
41. Configure your Microsoft Sentinel environment
42. Introduction to Microsoft Sentinel
43. Create and manage Microsoft Sentinel workspaces
44. Query logs in Microsoft Sentinel
45. Use watchlists in Microsoft Sentinel
46. Utilize threat intelligence in Microsoft Sentinel
47. Integrate Microsoft Defender XDR with Microsoft Sentinel
48. Connect logs to Microsoft Sentinel
49. Connect data to Microsoft Sentinel using data connectors
50. Connect Microsoft services to Microsoft Sentinel
51. Connect Microsoft Defender XDR to Microsoft Sentinel
52. Connect Windows hosts to Microsoft Sentinel
53. Connect Common Event Format logs to Microsoft Sentinel
54. Connect syslog data sources to Microsoft Sentinel
55. Connect threat indicators to Microsoft Sentinel
56. Create detections and perform investigations using Microsoft Sentinel
57. Threat detection with Microsoft Sentinel analytics
58. Automation in Microsoft Sentinel
59. Threat response with Microsoft Sentinel playbooks
60. Security incident management in Microsoft Sentinel
61. Identify threats with Behavioral Analytics
62. Data normalization in Microsoft Sentinel
63. Query, visualize, and monitor data in Microsoft Sentinel
64. Manage content in Microsoft Sentinel
65. Perform threat hunting in Microsoft Sentinel
66. Explain threat hunting concepts in Microsoft Sentinel
67. Threat hunting with Microsoft Sentinel
68. Use Search jobs in Microsoft Sentinel
69. Hunt for threats using notebooks in Microsoft Sentinel