SC-200 Microsoft Security Operations Analyst Course & SIMs

Unlock Expert Cybersecurity Skills: Master Microsoft Security Technologies

This comprehensive training goes beyond the typical Udemy course, providing you with in-depth knowledge and practical skills in Microsoft's leading security suite. Learn from an instructor with over 20 years of experience and a Microsoft Certified Trainer designation, who has empowered thousands of professionals.

What You'll Gain:

• Beginner-Friendly Learning: Concepts are explained in an easy-to-understand manner, perfect for those new to Microsoft security.
• Hands-On Practice: Instructor-led demonstrations and simulations allow you to apply your learning, even with limited prior experience.
• Real-World Skills: Gain proficiency in key Microsoft security tools and techniques used by organizations worldwide.

Core Topics Covered:

• Microsoft 365 Security Fundamentals:
  • Understanding the Microsoft Environment
  • Foundations of Active Directory Domains
  • RAS, DMZ, and Virtualization Foundations
  • Microsoft Cloud Service Foundations
  • Don't Skip: Essential information about Microsoft cloud services.
  • Don't Skip: Understanding the transition from Azure AD to Entra ID.
• Microsoft Entra ID (Azure AD):
  • Setting up Microsoft Entra for device management
  • Joining test virtual machines to Microsoft Entra
  • Managing devices with Defender for Endpoint
  • Bulk automatic onboarding with Microsoft Intune
  • Verifying Windows device onboarding
• Microsoft Defender XDR:
  • Introduction to Microsoft 365 Defender
  • Understanding Extended Detection and Response (XDR)
  • Microsoft Defender and Microsoft Purview Admin Centers
  • Microsoft Sentinel: Connecting Defender XDR to Sentinel
  • Managing devices with Microsoft Defender for Endpoint
  • Don't Skip: Leveraging extra features within Defender for Endpoint.
  • Incident management, alert notifications, and advanced endpoint features.
• Microsoft Defender Security Technologies:
  • Reviewing and responding to endpoint vulnerabilities
  • Managing assets and environments
  • Configuring and managing device groups
  • Identifying devices at risk using Microsoft Defender Vulnerability Management
  • Overview of Microsoft Defender for Cloud
  • Managing resources using Azure Arc
  • Connecting environments to Microsoft Defender for Cloud with multi-cloud account management
  • Identifying unmanaged devices using device discovery
• Microsoft Sentinel (SIEM/SOAR):
  • Designing and configuring a Microsoft Sentinel workspace
  • Configuring Sentinel roles and Azure RBAC
  • Designing and configuring data storage, log types, and retention
  • Ingesting data sources into Microsoft Sentinel
  • Configuring connectors, Azure Policy, and diagnostic settings
  • Connectors for MS 365 Defender & Defender for Cloud
  • Syslog and CEF event collections
  • Windows security event collections
  • Threat intelligence connectors
  • Creating custom log tables
  • Configuring protections within Defender security technologies
  • Planning and configuring Microsoft Defender for Cloud settings
  • Configuring security policies, including Attack Surface Reduction (ASR)
  • Assessing and recommending cloud workload protection
  • Automated onboarding of Azure resources
  • Configuring detection in Microsoft Defender XDR
  • Running attack simulation email campaigns in Microsoft 365 Defender
  • Using Kusto Query Language (KQL) to identify threats
  • Identifying and remediating security risks with Microsoft Secure Score
  • Analyzing threat analytics in the Microsoft 365 Defender portal
  • Configuring and managing custom detections and alerts
  • Microsoft Sentinel analytics rules
  • Fusion rule configuration
  • Microsoft security analytics rules
  • Scheduled query rules (built-in and custom)
  • Near Real-Time (NRT) analytics rules
  • Managing analytics rules from the Content Hub
  • Watchlist management
  • Threat indicator management
  • Responding to alerts and incidents in Microsoft Defender XDR
  • Using policies to remediate threats across Email, Teams, SharePoint & OneDrive
  • Investigating, responding to, and remediating threats with Defender for Office 365
  • Understanding and implementing Data Loss Prevention (DLP) in Microsoft 365 Defender
  • Implementing DLP policies for response and alerting
  • Investigating and responding to DLP alerts
  • Understanding and generating Insider Risk Policies
  • Investigating and responding to Insider Risk alerts
• Microsoft Defender for Cloud Apps (Cloud App Security):
  • Discovering, identifying, investigating, and remediating