Microsoft Defender for Endpoint course with hands on sims

Unlock Expert-Level Endpoint Security with Microsoft 365 & Azure!

This comprehensive training goes far beyond typical Udemy courses. Gain practical skills from an instructor with over 20 years of experience and Microsoft Certified Trainer credentials, having trained thousands of professionals. Learn through easy-to-understand concepts, hands-on exercises, and real-world simulations – perfect for beginners and experienced users alike.

What You'll Master:

• Microsoft 365 & Azure Fundamentals: Build a strong foundation in the Microsoft cloud environment.
• Active Directory Domains: Understand and manage Active Directory for secure network access.
• RAS, DMZ & Virtualization: Gain insights into network security and virtualization technologies.
• Microsoft Cloud Services: Explore the breadth of Microsoft's cloud offerings.

Essential Setup & Prerequisites:

• Account Setup: Learn how to create trial Microsoft 365/Azure accounts.
• Virtual Machine Environments: Set up Hyper-V (on Windows) or Azure virtual machines for practical exercises.
• Hyper-V Mastery:
  • Installation and configuration of Hyper-V.
  • Creating virtual switches.
  • Downloading the Windows 11 ISO.
  • Installing a Windows 11 virtual machine.
• Microsoft Entra (Azure AD) Device Management:
  • Registering vs. joining devices.
  • Configuring Microsoft Entra for device management.
  • Joining your virtual machine to Microsoft Entra.

Endpoint Security with Microsoft Defender for Endpoint:

• Understanding Endpoint Security: Learn the core principles of protecting endpoints.
• Microsoft Defender for Endpoint Overview: A detailed look at features, licensing (P1 vs. P2), and the Microsoft 365 Defender Portal.
• Integration with Microsoft Intune: How Defender for Endpoint works with Intune for comprehensive device management.
• Setting Up Defender for Endpoint:
  • Prerequisites and supported operating systems.
  • Creating a Microsoft Defender Admin role.
  • Onboarding Windows devices.
  • Mass automatic onboarding with Microsoft Intune.
  • Verifying device onboarding and implementing device discovery.
• Vulnerability Management:
  • Understanding Common Vulnerabilities and Exposures (CVEs).
  • Inspecting vulnerabilities on devices.
  • Using the vulnerability management dashboard for a high-level overview.
  • Leveraging vulnerability recommendations for improved security.
  • Implementing remediation within vulnerability management.
• Device Group Management: Create and manage device groups for targeted security policies.
• Configuration & Policy Management:
  • Hardening endpoint security with Endpoint Security Policies.
  • Attack Surface Reduction (ASR) Rules.
  • Next-Gen Protection with Microsoft Defender for Endpoint.
  • Understanding and configuring local anti-virus and Defender Firewall settings.
  • Implementing Firewall Rule Policies.
  • Utilizing Security Baselines.
• Microsoft Purview Endpoint DLP (Data Loss Prevention):
  • Understanding DLP concepts and device requirements.
  • Configuring Endpoint DLP policies with advanced rules.
  • Enabling Just-In-Time (JIT) protection.

Incident Response & Investigation:

• Automated Investigation and Remediation (AIR): Implement AIR for automated incident response.
• Triggering and Investigating Incidents: Testing incident triggers and managing alerts.
• Alert Management & Classification: Viewing, managing, and classifying detected alerts.
• Kusto Query Language (KQL):
  • Introduction to KQL and the Microsoft KQL Demo environment.
  • Basic KQL syntax for searching and filtering data.
  • Summarizing KQL results and controlling data display.
  • Using KQL variables and combining output.
  • Threat Hunting with Advanced Hunting (KQL).
  • Leveraging Microsoft Sentinel and the Defender repository of pre-made KQL queries.