Microsoft Defender Course with hands on training and sims

Unlock Expert-Level Security with Microsoft Defender: A Comprehensive Training

This isn't your typical Microsoft security course! Gain practical, hands-on skills with a training program designed for both beginners and experienced professionals. Learn from an instructor with over 20 years of experience and Microsoft Certified Trainer certification, who has successfully trained thousands of individuals.

What You'll Gain:

• Easy-to-Understand Concepts: Master complex Microsoft security topics with clear, step-by-step explanations.
• Hands-On Practice: Follow along with instructor-led demonstrations and simulations – perfect for building practical skills, even with little to no prior experience.
• Real-World Application: Apply your knowledge through practical tutorials and exercises.

Core Topics Covered:

• Microsoft Environment Foundations:
  • Understanding the Microsoft ecosystem.
  • Foundations of Active Directory Domains.
  • RAS, DMZ, and Virtualization fundamentals.
  • Introduction to Microsoft Cloud Services.
  • Don't Skip: Essential information about Microsoft cloud services.
  • Don't Skip: Understanding the transition from Azure AD to Entra ID.
• Microsoft 365 Defender Suite:
  • Getting Started: Creating a free Microsoft 365 Account and activating licenses for Defender for Endpoint and Vulnerabilities.
  • Basic Concepts of Microsoft Defender Suite & Services.
  • Using the Defender and Purview admin centers.
  • Microsoft Defender for Office 365:
    • What is Microsoft Defender for Office 365?
    • Implementing policies for Email, SharePoint, OneDrive, and Teams.
    • Threat response using Defender for Office 365.
    • Performing a campaign email attack simulation.
  • Microsoft Defender for Cloud Apps and Data Loss Prevention (DLP):
    • Understanding Microsoft Defender for Cloud Apps.
    • Investigating security risks in Defender for Cloud Apps.
    • Data Loss Prevention (DLP) concepts.
    • DLP policy alert investigation.
• Microsoft Defender for Endpoint & Vulnerability Management:
  • Understanding Microsoft Defender for Endpoint concepts.
  • Deploying a Windows 11 VM endpoint.
  • Attack Surface Reduction (ASR) support with Intune.
  • Device onboarding with Defender for Endpoint.
  • Endpoint advanced features, alerts, and incidents.
  • Device attack surface reduction (ASR).
  • Device groups with Defender for Endpoint.
  • Microsoft Defender Vulnerability Management: risk identification, endpoint threat indicators, and device discovery.
• Microsoft Defender for Identity:
  • Microsoft Entra ID security risk mitigation.
  • Microsoft Entra Identity Protection security risk mitigation.
  • Using Defender for Identity to mitigate threats with AD DSM.
• Microsoft 365 Defender as Extended Detection and Response (XDR):
  • Visualizing XDR concepts.
  • Configuring the Microsoft 365 Defender simulation lab.
  • Performing an attack using the simulation lab.
  • Microsoft 365 Defender incidents and automated investigations.
  • Microsoft 365 Defender action and submissions.
  • Using Kusto Query Language (KQL) for threat identification.
  • Microsoft Secure Score and threat analytics.
  • Custom detections and alerts.
• Microsoft Defender for Cloud, Servers & DevOps:
  • Introduction to Defender for Cloud, Defender for Servers & Defender for DevOps.
  • Regulatory compliance policies with MCSB.
  • Remediation with Secure Score in Defender for Cloud.
  • Microsoft Defender for Servers.
  • Microsoft Defender for DevOps.
  • Microsoft Defender External Attack Surface Management (EASM).
  • Microsoft Defender for Cloud full management and configurations.
  • Settings configuration in Defender for Cloud.
  • Roles in Microsoft Defender for Cloud.
  • Automating Azure resource onboarding.
  • Azure Arc connections and multi-cloud connections.
  • Email notifications in Microsoft Defender for Cloud.
  • Using alert suppression rules and workflow automation.
  • Using sample alerts and incidents.
  • Microsoft Defender for Cloud recommendations.
  • Security alerts and incidents in Microsoft Defender for Cloud.
  • Using threat intelligence reports with Microsoft Defender for Cloud.
  • Dealing with insider risks in Microsoft 365.
  • Insider risk policy generation and investigation.
  • Audit and search capabilities in Microsoft Defender and Microsoft Purview.
  • Licensing and permissions