loader image
Skip to main content
  • SC-200: Microsoft Security Operations Analyst
    0%
  • Previous
  • Course data
    Getting Started
    🟢 Course Slides
    🟢 Overview: SC-200: Microsoft Security Operations Analyst
    🟢 How This Course Works
    🟢 Schedule, Key Terms and Resources
    Mitigate threats using Microsoft Defender XDR
    1.1 Introduction to Microsoft Defender XDR threat protection
    🟢 Overview
    🔴 1.1.1 Explore Extended Detection & Response (XDR) response use cases
    🔴 1.1.2 Understand Microsoft Defender XDR in a Security Operations Center (SOC)
    🔴 1.1.3 Explore Microsoft Security Graph
    🟢 1.1.4 Investigate security incidents in Microsoft Defender XDR
    1.2 Mitigate incidents using Microsoft Defender
    🟢 Overview
    🟢 1.2.1 Use the Microsoft Defender portal
    🟢 1.2.2 Manage incidents
    🟢 1.2.3 Investigate incidents
    🟡 1.2.3a Work the Incident
    🔴 1.2.4 Manage and investigate alerts
    🟢 1.2.5 Manage automated investigations
    🔴 1.2.6 Use the action center
    🟢 1.2.7 Explore advanced hunting
    🔴 1.2.8 Investigate Microsoft Entra sign-in logs
    🔴 1.2.9 Understand Microsoft Secure Score
    🔴 1.2.10 Analyze threat analytics with the Security Copilot Threat Intelligence Briefing Agent
    🔴 1.2.11 Analyze reports
    🟡 1.2.12 Configure the Microsoft Defender portal
    1.3 Remediate threats using Microsoft Defender
    🟢 Overview
    🟢 1.3.1 Automate, investigate, and remediate
    🔴 1.3.2 Configure, protect, and detect
    🟢 1.3.3 Microsoft Security Copilot Phishing Triage Agent in Microsoft Defender
    🔴 1.3.4 Simulate attacks
    1.4 Safeguard your environment with Microsoft Defender for Identity
    🟢 Overview
    🔴 1.4.1 Configure Microsoft Defender for Identity sensors
    🟢 1.4.2 Review compromised accounts or data
    🔴 1.4.3 Integrate with other Microsoft tools
    1.5 Manage Microsoft Entra Identity Protection
    🟢 Overview
    🟢 1.5.1 Review identity protection basics
    🔴 1.5.2 Implement and manage user risk policy
    🔴 1.5.3 Exercise enable sign-in risk policy
    🔴 1.5.4 Exercise configure Microsoft Entra multifactor authentication registration policy
    🟢 1.5.5 Monitor, investigate, and remediate elevated risky users
    🔴 1.5.6 Implement security for workload identities
    🔴 1.5.7 Explore Microsoft Defender for Identity
    🔴 1.5.8 Explore the Identity Risk Management Agent
    1.6 Secure your cloud apps and services with Microsoft Defender for Cloud Apps
    🟢 Overview
    🟢 1.6.1 Understand the Defender for Cloud Apps Framework
    🔴 1.6.2 Explore your cloud apps with Cloud Discovery
    🔴 1.6.3 Protect your data and apps with Conditional Access App Control
    🔴 1.6.4 Walk through discovery and access control with Microsoft Defender for Cloud Apps
    🔴 1.6.5 Classify and protect sensitive information
    🟢 1.6.6 Detect Threats
    Lab 1: Explore Microsoft Defender XDR
    🔴 Overview
    🔴 Explore Microsoft Defender XDR
    🟢 Recap
    🔴 Knowledge Check
    Mitigate threats using Microsoft Security Copilot
    2.1 Introduction to generative AI and agents
    🟢 Overview
    🔴 2.1.1 Large language models (LLMs)
    🔴 2.1.2 Prompts
    🟢 2.1.3 AI agents
    🔴 2.1.4 Exercise - Explore generative AI
    2.2 Describe Microsoft Security Copilot
    🟢 Overview
    🟢 2.2.1 Get acquainted with Microsoft Security Copilot
    🔴 2.2.2 Describe Microsoft Security Copilot terminology
    🔴 2.2.3 Describe how Microsoft Security Copilot processes prompt requests
    🟢 2.2.4 Describe the elements of an effective prompt
    🟡 2.2.5 Describe how to enable Microsoft Security Copilot
    2.3 Describe the core features of Microsoft Security Copilot
    🔴 Overview
    🔴 2.3.1 Describe the features available in the standalone experience of Microsoft Security Copilot
    🔴 2.3.2 Describe the features available in a session of the standalone experience
    🔴 2.3.3 Describe workspaces
    🔴 2.3.4 Describe Security Copilot plugins
    🔴 2.3.5 Describe custom promptbooks
    🔴 2.3.6 Describe knowledge base connections
    2.4 Describe the embedded experiences of Microsoft Security Copilot
    🟢 Overview
    🟢 2.4.1 Describe Copilot in Microsoft Defender XDR
    🔴 2.4.2 Copilot in Microsoft Purview
    🔴 2.4.3 Copilot in Microsoft Entra
    🔴 2.4.4 Copilot in Microsoft Intune
    🔴 2.4.5 Copilot in Microsoft Defender for Cloud
    2.5 Experience Security Copilot through guided simulations
    🔴 Overview
    🔴 2.5.1 Explore owner settings in Security Copilot
    🔴 2.5.2 Use prompts and promptbooks in Security Copilot
    🔴 2.5.3 Create a custom promptbook in Security Copilot
    🔴 2.5.4 Investigate data protection activity in Microsoft Purview
    🔴 2.5.5 Investigate insider risks and compliance in Microsoft Purview
    🔴 2.5.6 Investigate security incidents in Microsoft Defender XDR
    🔴 2.5.7 Explore and create an agent in Security Copilot
    🔴 2.5.8 Explore the Conditional Access Optimization Agent
    Lab 2: Explore use cases in Microsoft Security Copilot
    🔴 Overview
    🔴 Explore use cases in Microsoft Security Copilot
    🟢 Recap
    🔴 Knowledge Check
    Mitigate threats using Microsoft Purview
    3.1 Investigate and respond to Microsoft Purview Data Loss Prevention alerts
    🟢 Overview
    🟢 3.1.1 Understand data loss prevention (DLP) alerts
    🔴 3.1.2 Understand the DLP alert lifecycle
    🔴 3.1.3 Configure DLP policies to generate alerts
    🟢 3.1.4 Investigate DLP alerts in Microsoft Purview
    🔴 3.1.5 Investigate DLP alerts in Microsoft Defender XDR
    🔴 3.1.6 Investigate DLP alerts with Security Copilot and AI agents
    🟢 3.1.7 Respond to DLP alerts
    🔴 3.1.8 Exercise - Investigate a DLP alert and related incident
    3.2 Investigate insider risk alerts and related activity
    🟢 Overview
    🟢 3.2.1 Understand insider risk alerts and investigations
    🔴 3.2.2 Manage alert volume in insider risk management
    🟢 3.2.3 Investigate and triage insider risk alerts in Microsoft Purview
    🔴 3.2.4 Investigate insider risk alerts with Security Copilot and AI agents
    🔴 3.2.5 Analyze alert context with the All risk factors tab
    🔴 3.2.6 Investigate activity details with the Activity explorer tab
    🔴 3.2.7 Review patterns over time with the User activity tab
    🔴 3.2.8 Investigate insider risk alerts in Microsoft Defender XDR
    🔴 3.2.9 Manage and take action on insider risk cases
    🔴 3.2.10 Exercise - Investigate potential data theft using Insider Risk Management
    3.3 Search for content with Microsoft Purview eDiscovery
    🟢 Overview
    🟢 3.3.1 Understand eDiscovery and content search capabilities
    🔴 3.3.2 Prerequisites for using eDiscovery in Microsoft Purview
    🔴 3.3.3 Create an eDiscovery search
    🟢 3.3.4 Conduct an eDiscovery search
    🔴 3.3.5 Export eDiscovery search results
    3.4 Search and Investigate with Microsoft Purview Audit
    🟢 Overview
    🟢 3.4.1 Understand how Microsoft Purview Audit works
    🔴 3.4.2 Configure and manage Microsoft Purview Audit
    🟢 3.4.3 Run audit searches with Audit (Standard)
    🔴 3.4.4 Search for Copilot and AI app activities
    🔴 3.4.5 Investigate activities with Audit (Premium)
    🔴 3.4.6 Analyze and report on audit results
    🔴 3.4.7 Configure audit retention with Audit (Premium)
    Lab 3: Explore Microsoft Purview Audit logs
    🔴 Overview
    🔴 Explore Microsoft Purview Audit logs
    🟢 Recap
    🔴 Knowledge Check
    Mitigate threats using Microsoft Defender for Endpoint
    4.1 Protect against threats with Microsoft Defender for Endpoint
    🟢 Overview
    🔴 4.1.1 Practice security administration
    🟢 4.1.2 Hunt threats within your network
    4.2 Deploy the Microsoft Defender for Endpoint environment
    🟢 Overview
    🟡 4.2.1 Create your environment
    🔴 4.2.2 Understand operating systems compatibility and features
    🟢 4.2.3 Onboard devices
    🔴 4.2.4 Manage access
    🔴 4.2.5 Create and manage roles for role-based access control
    🟢 4.2.6 Configure device groups
    🔴 4.2.7 Configure environment advanced features
    4.3 Implement Windows security enhancements with Microsoft Defender for Endpoint
    🟢 Overview
    🔴 4.3.1 Understand attack surface reduction
    🟢 4.3.2 Enable attack surface reduction rules
    4.4 Perform device investigations in Microsoft Defender for Endpoint
    🟢 Overview
    🔴 4.4.1 Use the device inventory list
    🟢 4.4.2 Investigate the device
    🔴 4.4.3 Use behavioral blocking
    🔴 4.4.4 Detect devices with device discovery
    4.5 Perform actions on a device using Microsoft Defender for Endpoint
    🟢 Overview
    🔴 4.5.1 Explain device actions
    🟡 4.5.1a Pick the Device Action
    🔴 4.5.2 Run Microsoft Defender antivirus scan on devices
    🟢 4.5.3 Collect investigation package from devices
    🟢 4.5.4 Initiate live response session
    4.6 Perform evidence and entities investigations using Microsoft Defender for Endpoint
    🟢 Overview
    🟢 4.6.1 Investigate a file
    🔴 4.6.2 Investigate a user account
    🔴 4.6.3 Investigate an IP address
    🔴 4.6.4 Investigate a domain
    4.7 Configure and manage automation using Microsoft Defender for Endpoint
    🟢 Overview
    🔴 4.7.1 Configure advanced features
    🔴 4.7.2 Manage automation upload and folder settings
    🟢 4.7.3 Configure automated investigation and remediation capabilities
    🔴 4.7.4 Block at risk devices
    4.8 Configure for alerts and detections in Microsoft Defender for Endpoint
    🟢 Overview
    🔴 4.8.1 Configure advanced features
    🔴 4.8.2 Configure alert notifications
    🟢 4.8.3 Manage alert suppression
    🟢 4.8.4 Manage indicators
    4.9 Utilize Vulnerability Management in Microsoft Defender for Endpoint
    🟢 Overview
    🟢 4.9.1 Understand vulnerability management
    🔴 4.9.2 Explore vulnerabilities on your devices
    🔴 4.9.3 Manage remediation
    Lab 4: Deploy and use Microsoft Defender for Endpoint
    🔴 Overview
    🔴 Deploy Microsoft Defender for Endpoint
    🔴 Mitigate Attacks with Microsoft Defender for Endpoint
    🟢 Recap
    🔴 Knowledge Check
    Create queries for Microsoft Sentinel using Kusto Query Language (KQL)
    5.1 Construct KQL statements for Microsoft Sentinel
    🟢 Overview
    🟢 5.1.1 Understand the Kusto Query Language statement structure
    🟢 5.1.2 Use the search operator
    🟢 5.1.3 Use the where operator
    🟢 5.1.4 Use the let statement
    🟢 5.1.5 Use the extend operator
    🟢 5.1.6 Use the order by operator
    🟢 5.1.7 Use the project operators
    5.2 Analyze query results using KQL
    🟢 Overview
    🟢 5.2.1 Use the summarize operator
    🟢 5.2.2 Use the summarize operator to filter results
    🟢 5.2.3 Use the summarize operator to prepare data
    🟢 5.2.4 Use the render operator to create visualizations
    5.3 Build multi-table statements using KQL
    🟢 Overview
    🟢 5.3.1 Use the union operator
    🟢 5.3.2 Use the join operator
    5.4 Work with data in Microsoft Sentinel using Kusto Query Language
    🟢 Overview
    🟢 5.4.1 Extract data from unstructured string fields
    🟢 5.4.2 Extract data from structured string data
    🔴 5.4.3 Integrate external data
    🟢 5.4.4 Create parsers with functions
    Lab 5: Create queries for Microsoft Sentinel using KQL
    🔴 Overview
    🔴 Create queries for Microsoft Sentinel using Kusto Query Language (KQL)
    🟢 Recap
    🔴 Knowledge Check
    Configure your Microsoft Sentinel environment
    6.1 Introduction to Microsoft Sentinel
    🟢 Overview
    🔴 6.1.1 What is Microsoft Sentinel?
    🟢 6.1.2 How Microsoft Sentinel works
    🔴 6.1.3 When to use Microsoft Sentinel
    6.2 Create and manage Microsoft Sentinel workspaces
    🟢 Overview
    🔴 6.2.1 Plan for the Microsoft Sentinel workspace
    🟢 6.2.2 Create a Microsoft Sentinel workspace
    🔴 6.2.3 Manage workspaces across tenants using Azure Lighthouse
    🔴 6.2.4 Understand Microsoft Sentinel permissions and roles
    🔴 6.2.5 Manage Microsoft Sentinel settings
    🟢 6.2.6 Configure logs
    6.3 Query logs in Microsoft Sentinel
    🟢 Overview
    🟢 6.3.1 Query logs in the logs page
    🔴 6.3.2 Understand Microsoft Sentinel tables
    🟢 6.3.3 Understand common tables
    🔴 6.3.4 Understand Microsoft Defender XDR tables
    6.4 Use watchlists in Microsoft Sentinel
    🟢 Overview
    🔴 6.4.1 Plan for watchlists
    🟢 6.4.2 Create a watchlist
    🔴 6.4.3 Manage watchlists
    6.5 Utilize threat intelligence in Microsoft Sentinel
    🟢 Overview
    🔴 6.5.1 Define threat intelligence
    🟢 6.5.2 Manage your threat indicators
    🟢 6.5.3 View your threat indicators with KQL
    6.6 Integrate Microsoft Defender XDR with Microsoft Sentinel
    🟢 Overview
    🟢 6.6.1 Understand the benefits of integrating Microsoft Sentinel with Defender XDR
    🔴 6.6.2 Explore the capability differences between Microsoft Defender XDR and Microsoft Sentinel portals
    🟡 6.6.3 Onboarding Microsoft Sentinel to Microsoft Defender XDR
    🟢 6.6.4 Explore Microsoft Sentinel features in Microsoft Defender XDR
    🔴 6.6.5 Exercise - Connect Microsoft Sentinel to Microsoft Defender XDR
    Lab 6: Configure your Microsoft Sentinel environment
    🔴 Overview
    🔴 Configure your Microsoft Sentinel environment (Defender portal)
    🔴 Configure your Microsoft Sentinel environment (Azure portal version)
    🟢 Recap
    🔴 Knowledge Check
    Connect logs to Microsoft Sentinel
    7.1 Connect data to Microsoft Sentinel using data connectors
    🟢 Overview
    🟢 7.1.1 Ingest log data with data connectors
    🔴 7.1.2 Understand data connector providers
    🔴 7.1.3 View connected hosts
    7.2 Connect Microsoft services to Microsoft Sentinel
    🟢 Overview
    🔴 7.2.1 Plan for Microsoft services connectors
    🟢 7.2.2 Connect the Microsoft 365 connector
    🔴 7.2.3 Connect the Microsoft Entra connector
    🔴 7.2.4 Connect the Microsoft Entra ID Protection connector
    🟢 7.2.5 Connect the Azure Activity connector
    7.3 Connect Microsoft Defender XDR to Microsoft Sentinel
    🟢 Overview
    🔴 7.3.1 Plan for Microsoft Defender XDR connectors
    🟢 7.3.2 Connect the Microsoft Defender XDR connector
    🔴 7.3.3 Connect Microsoft Defender for Cloud connector
    🔴 7.3.4 Connect Microsoft Defender for IoT
    🔴 7.3.5 Connect Microsoft Defender legacy connectors
    7.4 Connect Windows hosts to Microsoft Sentinel
    🟢 Overview
    🟢 7.4.1 Plan for Windows hosts security events connector
    🟢 7.4.2 Connect using the Windows Security Events via AMA Connector
    🟡 7.4.2a Choose the Connector
    🔴 7.4.3 Connect using the Security Events via Legacy Agent Connector
    🔴 7.4.4 Collect Sysmon event logs
    7.5 Connect Common Event Format logs to Microsoft Sentinel
    🟢 Overview
    🟢 7.5.1 Plan for Common Event Format connector
    🔴 7.5.2 Connect your external solution using the Common Event Format connector
    7.6 Connect syslog data sources to Microsoft Sentinel
    🟢 Overview
    🔴 7.6.1 Plan for syslog data collection
    🔴 7.6.2 Collect data from Linux-based sources using syslog
    🟢 7.6.3 Configure the Data Collection Rule for Syslog Data Sources
    🔴 7.6.4 Parse syslog data with KQL
    7.7 Connect threat indicators to Microsoft Sentinel
    🟢 Overview
    🔴 7.7.1 Plan for threat intelligence connectors
    🔴 7.7.2 Connect the Defender Threat Intelligence connector
    🔴 7.7.3 Connect the threat intelligence TAXII connector
    🔴 7.7.4 Connect the threat intelligence Upload API connector
    🟢 7.7.5 View your threat indicators with KQL
    Lab 7: Connect data to Microsoft Sentinel using data connectors
    🔴 Overview
    🔴 Connect data to Microsoft Sentinel using data connectors
    🔴 Connect Windows devices to Microsoft Sentinel using data connectors
    🔴 Connect Linux hosts to Microsoft Sentinel using data connectors
    🔴 Connect Defender XDR to Microsoft Sentinel using data connectors
    🟢 Recap
    🔴 Knowledge Check
    Create detections and perform investigations using Microsoft Sentinel
    8.1 Threat detection with Microsoft Sentinel analytics
    🟢 Overview
    🔴 8.1.1 Exercise - Detect threats with Microsoft Sentinel analytics
    🔴 8.1.2 What is Microsoft Sentinel Analytics?
    🟢 8.1.3 Types of analytics rules
    🟢 8.1.4 Create an analytics rule from templates
    🟢 8.1.5 Create an analytics rule from wizard
    🟢 8.1.6 Manage analytics rules
    🔴 8.1.7 Exercise - Detect threats with Microsoft Sentinel analytics
    8.2 Automation in Microsoft Sentinel
    🟢 Overview
    🟢 8.2.1 Understand automation options
    🟢 8.2.2 Create automation rules
    8.3 Threat response with Microsoft Sentinel playbooks
    🟢 Overview
    🔴 8.3.1 Exercise - Create a Microsoft Sentinel playbook
    🟢 8.3.2 What are Microsoft Sentinel playbooks?
    🟢 8.3.3 Trigger a playbook in real-time
    🔴 8.3.4 Run playbooks on demand
    🟡 8.3.4a Rule, Automation or Playbook
    🔴 8.3.5 Exercise - Create a Microsoft Sentinel playbook
    8.4 Security incident management in Microsoft Sentinel
    🟢 Overview
    🔴 8.4.1 Exercise - Set up the Azure environment
    🟢 8.4.2 Understand incidents
    🟢 8.4.3 Incident evidence and entities
    🟢 8.4.4 Incident management
    🔴 8.4.5 Exercise - Investigate an incident
    8.5 Identify threats with Behavioral Analytics
    🟢 Overview
    🟢 8.5.1 Understand behavioral analytics
    🟢 8.5.2 Explore entities
    🔴 8.5.3 Display entity behavior information
    🔴 8.5.4 Use Anomaly detection analytical rule templates
    8.6 Data normalization in Microsoft Sentinel
    🟢 Overview
    🟢 8.6.1 Understand data normalization
    🟢 8.6.2 Use ASIM Parsers
    🔴 8.6.3 Understand parameterized KQL functions
    🔴 8.6.4 Create an ASIM Parser
    🔴 8.6.5 Configure Azure Monitor Data Collection Rules
    8.7 Query, visualize, and monitor data in Microsoft Sentinel
    🟢 Overview
    🔴 8.7.1 Exercise - Query and visualize data with Microsoft Sentinel Workbooks
    🔴 8.7.2 Monitor and visualize data
    🔴 8.7.3 Query data using Kusto Query Language
    🟢 8.7.4 Use default Microsoft Sentinel Workbooks
    🟢 8.7.5 Create a new Microsoft Sentinel Workbook
    🔴 8.7.6 Exercise - Visualize data using Microsoft Sentinel Workbooks
    8.8 Manage content in Microsoft Sentinel
    🟢 Overview
    🟢 8.8.1 Use solutions from the content hub
    🟢 8.8.2 Use repositories for deployment
    Lab 8: Create detections and perform investigations using Microsoft Sentinel
    🔴 Overview
    🔴 Create a Playbook
    🔴 Create a Scheduled Query from a template
    🔴 Explore Entity Behavior Analytics
    🔴 Prepare to perform simulated attacks
    🔴 Conduct attacks
    🔴 Create Detections
    🔴 Investigate Incidents
    🔴 Create ASIM parsers
    🔴 Create workbooks
    🔴 Use Repositories in Microsoft Sentinel
    🟢 Recap
    🔴 Knowledge Check
    Perform threat hunting in Microsoft Sentinel
    9.1 Explain threat hunting concepts in Microsoft Sentinel
    🟢 Overview
    🟢 9.1.1 Understand cybersecurity threat hunts
    🟢 9.1.2 Develop a hypothesis
    🔴 9.1.3 Explore MITRE ATT&CK
    9.2 Threat hunting with Microsoft Sentinel
    🟢 Overview
    🔴 9.2.1 Exercise setup
    🟢 9.2.2 Explore creation and management of threat-hunting queries
    🟢 9.2.3 Save key findings with bookmarks
    🟢 9.2.4 Track threat-hunting investigations with hunts
    🔴 9.2.5 Exercise - Hunt for threats by using Microsoft Sentinel
    9.3 Use Search jobs in Microsoft Sentinel
    🟢 Overview
    🟢 9.3.1 Hunt with a Search Job
    🟢 9.3.2 Restore historical data
    9.4 Hunt for threats using notebooks in Microsoft Sentinel
    🟢 Overview
    🔴 9.4.1 Access Azure Sentinel data with external tools
    🟢 9.4.2 Hunt with notebooks
    🟢 9.4.3 Create a notebook
    🟢 9.4.4 Explore notebook code
    Lab 9: Perform threat hunting in Microsoft Sentinel
    🔴 Overview
    🔴 Perform Threat Hunting with Microsoft Sentinel in Microsoft Defender XDR
    🔴 Threat Hunting using Notebooks with Microsoft Sentinel in Microsoft Defender XDR
    🔴 Perform Threat Hunting in Microsoft Sentinel (Azure portal version)
    🟢 Recap
    🔴 Knowledge Check
    Defender for Cloud
    10.1 Plan for cloud workload protections using Microsoft Defender for Cloud
    🔴 Overview
    🔴 10.1.1 Explain Microsoft Defender for Cloud
    🔴 10.1.2 Describe Microsoft Defender for Cloud workload protections
    🔴 10.1.3 Exercise: Microsoft Defender for Cloud interactive guide
    🔴 10.1.4 Enable Microsoft Defender for Cloud
    10.2 Connect Azure assets to Microsoft Defender for Cloud
    🔴 Overview
    🔴 10.2.1 Explore and manage your resources with asset inventory
    🔴 10.2.2 Configure auto provisioning
    🔴 10.2.3 Manual agent provisioning
    10.3 Connect non-Azure resources to Microsoft Defender for Cloud
    🔴 Overview
    🔴 10.3.1 Protect non-Azure resources
    🔴 10.3.2 Connect non-Azure machines
    🔴 10.3.3 Connect your AWS accounts
    🔴 10.3.4 Connect your GCP accounts
    10.4 Manage your cloud security posture management
    🔴 Overview
    🔴 10.4.1 Explore Secure Score
    🔴 10.4.2 Explore Recommendations
    🔴 10.4.3 Measure and enforce regulatory compliance
    🔴 10.4.4 Understand Workbooks
    10.5 Explain cloud workload protections in Microsoft Defender for Cloud
    🔴 Overview
    🔴 10.5.1 Understand Microsoft Defender for servers
    🔴 10.5.2 Understand Microsoft Defender for App Service
    🔴 10.5.3 Understand Microsoft Defender for Storage
    🔴 10.5.4 Understand Microsoft Defender for SQL
    🔴 10.5.5 Understand Microsoft Defender for open-source databases
    🔴 10.5.6 Understand Microsoft Defender for Key Vault
    🔴 10.5.7 Understand Microsoft Defender for Resource Manager
    🔴 10.5.8 Understand Microsoft Defender for DNS
    🔴 10.5.9 Understand Microsoft Defender for Containers
    🔴 10.5.10 Understand Microsoft Defender additional protections
    10.6 Remediate security alerts using Microsoft Defender for Cloud
    🔴 Overview
    🔴 10.6.1 Understand security alerts
    🔴 10.6.2 Remediate alerts and automate responses
    🔴 10.6.3 Suppress alerts from Defender for Cloud
    🔴 10.6.4 Generate threat intelligence reports
    🔴 10.6.5 Respond to alerts from Azure resources
    Instructor Only
  • Next
  • Categories
    • All categories
    AI Learning Hub
    • AI Essentials
    • Level 1: Generative AI Foundation
    • Level 2: Grounding AI with your Data
    • Level 3: Automating AI Workflows
    • Copilot First-Step Kit
    • Claude
    • ChatGPT
    • Microsoft Copilot
    M365
    Office
    • Excel
    • Word
    • Outlook
    • PowerPoint
    Power Platform
    • Power BI
    • Power Apps
    • Power Automate
    • SharePoint
    • Microsoft Official
    • Adobe
    • CompTIA
    • Holding
    • Webinars
    • Programming
    • WordPress
    • Accounting
    • Google
    • Upskilling Series
  • Home
Log in
Forgot your password?
Categories Collapse Expand
  • All categories
AI Learning Hub
  • AI Essentials
  • Level 1: Generative AI Foundation
  • Level 2: Grounding AI with your Data
  • Level 3: Automating AI Workflows
  • Copilot First-Step Kit
  • Claude
  • ChatGPT
  • Microsoft Copilot
M365
Office
  • Excel
  • Word
  • Outlook
  • PowerPoint
Power Platform
  • Power BI
  • Power Apps
  • Power Automate
  • SharePoint
  • Microsoft Official
  • Adobe
  • CompTIA
  • Holding
  • Webinars
  • Programming
  • WordPress
  • Accounting
  • Google
  • Upskilling Series
Home

    Course info

    SC-200: Microsoft Security Operations Analyst

    Skill Level: Beginner

    Help & Support
    You are not logged in. (Log in)
    Data retention summary
    Get the mobile app
    Powered by Moodle

    Privacy Policy Terms & Conditions

    Copyrights Content