SC 200T00-A: Defend Against Cyberthreats with Microsoft's Security Operations Platform

Course Description:

Learn how to investigate, respond to, and hunt for threats using Microsoft Sentinel, Microsoft Defender XDR and Microsoft Defender for Cloud. In this course you will learn how to mitigate cyberthreats using these technologies. Specifically, you will configure and use Microsoft Sentinel as well as utilize Kusto Query Language (KQL) to perform detection, analysis, and reporting. The course was designed for people who work in a Security Operations job role and helps learners prepare for the exam SC-200: Microsoft Security Operations Analyst.

Course Objectives:

After completing this course, students will be able to: 

• Manage threat mitigation using Microsoft Defender XDR, Microsoft Purview, Microsoft Defender for Endpoint and Microsoft Defender for Cloud 
• Create KQL queries for Microsoft Sentinel 
• Configure your environment in Microsoft Sentinel 
• Manage log connection to Microsoft Sentinel 
• Detect and remediate threats using Microsoft Sentinel
• Manage threat hunting in Microsoft Sentinel