Microsoft SC-200 Security Operations Analyst Training

• How to explain how Microsoft Defender for Endpoint can remediate risks in your environment?
• How to administer a Microsoft Defender for Endpoint environment?
• How to configure Attack Surface Reduction rules on Windows devices?
• How to perform actions on a device using Microsoft Defender for Endpoint?
• How to investigate user accounts in Microsoft Defender for Endpoint?
• How to configure alert settings in Microsoft 365 Defender?
• How to investigate DLP alerts in Microsoft Defender for Cloud Apps?
• How to conduct advanced hunting in Microsoft 365 Defender?
• How to manage incidents in Microsoft 365 Defender?
• How to create a playbook to automate an incident response?
• How to configure auto-provisioning in Microsoft Defender for Cloud Apps?
• How to use KQL to access the watchlist in Microsoft Sentinel?
• How to explain how the threat landscape is evolving?
• How to emediate alerts in Microsoft Defender for Cloud Apps?

• 24 Hrs. Instructor-led Online Training
• Recorded Videos After Training
• Digital Learning Material
• Course Completion Certificate
• Lifetime e-Learning Access
• 24x7 After Training Support

• Individuals who work in a Security Operations job role IT professionals who are preparing for the exam SC-200: Microsoft Security Operations Analyst

• Basic understanding of Microsoft 365 and Basic understanding of scripting concepts
• Basic understanding of Microsoft security, compliance, and identity products
• Familiarity with Azure virtual machines and virtual networking
• Intermediate understanding of Windows 10
• Familiarity with Azure SQL Database and Azure Storage

• Multisoft Systems will provide you with a training completion certificate after completing this Exam SC 200 Microsoft Security Operations Analyst Training.

Module 1: Mitigate threats using Microsoft 365 Defender

• Introduction to threat protection with Microsoft 365
• Mitigate incidents using Microsoft 365 Defender
• Remediate risks with Microsoft Defender for Office 365
• Microsoft Defender for Identity
• Protect your identities with Azure AD Identity Protection
• Microsoft Defender for Cloud Apps
• Respond to data loss prevention alerts using Microsoft 365
• Manage insider risk in Microsoft 365

Module 2: Mitigate threats using Microsoft Defender for Endpoint

• Protect against threats with Microsoft Defender for Endpoint
• Deploy the Microsoft Defender for Endpoint environment
• Implement Windows security enhancements
• Perform device investigations
• Perform actions on a device
• Perform evidence and entities investigations
• Configure and manage automation
• Configure for alerts and detections
• Utilize Threat and Vulnerability Management

Module 3: Mitigate threats using Microsoft Defender for Cloud

• Plan for cloud workload protections using Microsoft Defender for Cloud
• Workload protections in Microsoft Defender for Cloud
• Connect Azure assets to Microsoft Defender for Cloud
• Connect non-Azure resources to Microsoft Defender for Cloud
• Remediate security alerts using Microsoft Defender for Cloud

Module 4: Create queries for Microsoft Sentinel using Kusto Query Language (KQL)

• Construct KQL statements for Microsoft Sentinel
• Analyze query results using KQL
• Build multi-table statements using KQL
• Work with string data using KQL statements

Module 5: Configure your Microsoft Sentinel environment

• Introduction to Microsoft Sentinel
• Create and manage Microsoft Sentinel workspaces
• Query logs in Microsoft Sentinel
• Use watchlists in Microsoft Sentinel
• Utilize threat intelligence in Microsoft Sentinel

Module 6: Connect logs to Microsoft Sentinel

• Connect data to Microsoft Sentinel using data connectors
• Connect Microsoft services to Microsoft Sentinel
• Connect Microsoft 365 Defender to Microsoft Sentinel
• Connect Windows hosts to Microsoft Sentinel
• Connect Common Event Format logs to Microsoft Sentinel
• Connect syslog data sources to Microsoft Sentinel
• Connect threat indicators to Microsoft Sentinel

Module 7: Create detections and perform investigations using Microsoft Sentinel

• Threat detection with Microsoft Sentinel analytics
• Security incident management in Microsoft Sentinel
• Threat response with Microsoft Sentinel playbooks
• User and entity behavior analytics in Microsoft Sentinel
• Query, visualize, and monitor data in Microsoft Sentinel

Module 8: Perform threat hunting in Microsoft Sentinel

• Threat hunting concepts in Microsoft Sentinel
• Threat hunting with Microsoft Sentinel
• Hunt for threats using notebooks in Microsoft Sentinel