SC-200: Microsoft Security Operations Analyst

What you'll learn

• Define the capabilities of Microsoft Defender for Endpoint.
• Understand how to hunt threats within your network.
• Explain how Microsoft Defender for Endpoint can remediate risks in your environment.
• Create a Microsoft Defender for Endpoint environment
• Onboard devices to be monitored by Microsoft Defender for Endpoint
• Configure Microsoft Defender for Endpoint environment settings
• Investigate incidents in Microsoft Defender for Endpoint
• Investigate alerts in Microsoft Defender for Endpoint
• Perform advanced hunting in Microsoft Defender for Endpoint
• Configure alert settings in Microsoft Defender for Endpoint
• Construct KQL statements
• Manage indicators in Microsoft Defender for Endpoint
• Describe Threat and Vulnerability Management in Microsoft Defender for Endpoint
• Identify vulnerabilities on your devices with Microsoft Defender for Endpoint
• Track emerging threats in Microsoft Defender for Endpoint

Requirements

• Basic understanding of Microsoft 365
• Intermediate understanding of Windows 10 devices
• Passion to learn about Cyber security
• Unlearn and learn new aspects of cloud security via Microsoft Defender
• Fundamental understanding of Microsoft security, compliance, and identity products
• Familiarity with Azure services, specifically Azure SQL Database and Azure Storage
• Familiarity with Azure virtual machines and virtual networking
• Foundational knowledge of computer networking
• Basic understanding of scripting concepts.

There is no short cut to learning Azure security. This course teaches you how to learn it the right way with tons of labs excercises and the right volume of labs.

The Microsoft Security Operations Analyst works with organizational stakeholders to secure the organization's information technology systems. Their mission is to reduce corporate risk by quickly resolving active attacks in the environment, advising on threat protection practices, and reporting policy violations to the proper stakeholders.

The following topics needs to be completed in order to achieve SC - 200 Certification.

• Module 1 Mitigate threats using Microsoft 365 Defender
• Module 2 Mitigate threats using Microsoft Defender for Endpoint
• Module 3 Mitigate threats using Azure Defender
• Module 4 Create queries for Azure Sentinel using Kusto Query Language
• Module 5 Microsoft Sentinel Environment - Configuration
• Module 6 Microsoft Sentinel Environment - Connecting Logs
• Module 7 Microsoft Sentinel Environment - Incidents, Threat Response , UEBA and Monitoring
• Module 8 Module 8 Perform Threat Hunting with Microsoft Sentinel

This learning path aligns with exam SC-200: Microsoft Security Operations Analyst Exam.

• Participants aspiring for SC 200 Certification
• Everyone who aspires to work in the modern age SOC environment
• Anyone wants to learn the M365 defender Suite of services