SC-200T00: Microsoft Security Operations Analyst
Course Overview
Learn how to investigate, respond to, and hunt for threats using Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft 365 Defender. In this course you will learn how to mitigate cyberthreats using these technologies. Specifically, you will configure and use Microsoft Sentinel as well as utilize Kusto Query Language (KQL) to perform detection, analysis, and reporting. The course was designed for people who work in a Security Operations job role and helps learners prepare for the exam SC-200: Microsoft Security Operations Analyst.
Course Content
Mitigate threats using Microsoft 365 Defender
Mitigate threats using Microsoft Defender for Endpoint
Mitigate threats using Microsoft Defender for Cloud
Create queries for Microsoft Sentinel using Kusto Query Language (KQL)
Configure your Microsoft Sentinel environment
Connect logs to Microsoft Sentinel
Create detections and perform investigations using Microsoft Sentinel
Perform threat hunting in Microsoft Sentinel
Target Audience
Azure Administrators
Cloud Administrators
Security Engineers
Cloud Security Engineers
Prerequisites
Basic understanding of Microsoft 365
Fundamental understanding of Microsoft security, compliance, and identity products
Familiarity with Azure services, specifically Azure SQL Database and Azure Storage
Familiarity with Azure VMs and virtual networking
Basic understanding of scripting concepts.
Certifications
This course is part of the following certifications