Description

Price: 10.00 USD | Size: 3.75 GB | Duration : 12 Hours | 80+ Video Lessons | ⭐️⭐️⭐️⭐️⭐️ 4.9

BRAND : Expert TRAINING | ENGLISH | Bonus :  Microsoft Security  PDF Guides |  INSTANT DOWNLOAD 

 

Security Operations Analyst Online Training

This intermediate Microsoft Security Operations Analyst training covers the objectives in the SC-200 exam, which is the one required exam to earn the Security Operations Analyst certification.

Microsoft has three tools that provide networks with security and stability, but those three tools don’t just work by magic. Microsoft developed the tools so that cybersecurity professionals with the right training could calibrate and configure them to provide a superior security posture for enterprise networks.

 

This Microsoft Security Operations Analyst training prepares you for the SC-200 certifying exam by diving deep into Microsoft’s three enterprise security programs: Defender, Defender for Cloud and Sentinel. Mastering them with this SC-200 course means knowing how to take control of a network’s first line of defense.

For anyone who manages IT training, this Microsoft training can be used for SC-200 exam prep, onboarding new security operations analysts, individual or team training plans, or as a Microsoft reference resource.

This Security Operations Analyst training maps to the SC-200 security exam objectives, and covers topics such as:

• Providing threat management monitoring and response
• Investigating, responding to and hunting for threats to network security
• Configuring and deploying network security tools
• Mastering Microsoft 365 Defender, Microsoft Defender for Cloud, and Microsoft Sentinel

This Security Operations Analyst training is considered professional-level Microsoft training, which means it was designed for security operations analysts. This security skills course is designed for security operations analysts with three to five years of experience with configuration and Microsoft security products.

New or aspiring security operations analysts. The Microsoft Security Operations Analyst is a cybersecurity certification designed with new and aspiring cybersecurity professionals in mind. This SC-200 course can take someone with only a little bit of cybersecurity familiarity and turn them into a certified security operations analyst. Learn to land a job mitigating enterprise network threats with this course.

Experienced security operations analysts. If you’ve already been working in the cybersecurity field for a few years, a lot of what you’ll find on the Microsoft Security Operations Analyst exam will be familiar. You’ve probably used Microsoft 365 Defender, Defender for Cloud, or Sentinel a few times already. But it’s only after this training that you can be sure you understand the inner workings of each one of them.

Getting to Know MS 365 Defender

1. What is Microsoft 365 Defender

8 mins

2. Microsoft 365 Defender Portal: Introduction

13 mins

3. Microsoft 365 Defender Portal: Endpoints

8 mins

4. Microsoft 365 Defender Portal: Email & Collaboration

7 mins

5. Microsoft 365 Defender Portal: Wrap-Up

10 mins

MS 365 Defender Policies and Rules

1. MS 365 Defender Policies & Rules: Built-In Rules

10 mins

2. MS 365 Defender Policies & Rules: Anti-Phishing

11 mins

3. MS 365 Defender Policies & Rules: Anti-SPAM

9 mins

4. MS 365 Defender Policies & Rules: Anti-Malware, Safe Attachments & Safe Links

10 mins

5. MS 365 Defender Policies & Rules: Allow/Block Lists

4 mins

6. MS 365 Defender Policies & Rules: Additional Rules

8 mins

7. MS 365 Defender Policies & Rules: Alert and Activity Policies

4 mins

MS Defender for Office 365

1. Protecting Office 365

6 mins

2. Teams, Sharepoint and OneDrive Policies

11 mins

3. Detect, Investigate, Respond and Remediate Threats

18 mins

4. User Email Submissions

6 mins

5. DLP Policies and Alerts

12 mins

6. Sensitivity Labels

9 mins

7. Insider Risk Policies

5 mins

MS Defender for Endpoint

1. Into to MS Defender for Endpoint

5 mins

2. Automated Investigation and Response (AIR)

6 mins

3. Data Settings and Alert Notifications

5 mins

4. Attack Surface Reduction Rules

5 mins

5. Recommend Security Baselines for Devices

14 mins

6. Custom Detection Alerts

5 mins

7. Responding to Incidents

11 mins

8. Recommended Endpoint Configurations

5 mins

9. Threat Analytics

3 mins

MS Defender for Identity

1. MS Defender for Endpoint

5 mins

2. Azure Identity Policies

9 mins

3. Conditional Access Policies

8 mins

4. Investigating Azure Identity Events

5 mins

5. Using Secure Score

5 mins

6. Tagging Sensitive Accounts

4 mins

7. Investigating Defender for Identity Events

6 mins

MCACS and MS 365 Defender Portal

1. Microsoft Defender for Cloud Apps

6 mins

2. Discovering Cloud Apps

15 mins

3. Investigating Cloud App Activity

16 mins

4. Cloud App Policies

6 mins

5. Cross-Domain Investigations

7 mins

6. Attack Simulation Training

10 mins

Configuring Defender for Cloud

1. Microsoft Defender for Cloud

11 mins

2. Data Retention and Recommendations

10 mins

3. Data Connectors

6 mins

4. Connect AWS Cloud Resources

6 mins

5. Connect GCP Cloud Resources

5 mins

6. Cloud Alert Rules

10 mins

Managing Defender for Cloud

1. Intro: Managing Defender for Cloud

1 min

2. Automated Responses

18 mins

3. Types of Alerts

3 mins

4. Managing Alerts

16 mins

5. Threat Intelligence

3 mins

6. Key Vault Alerts

6 mins

7. Data Privacy

2 mins

Getting To Know Microsoft Sentinel

1. SIEMs and SOARs

11 mins

2. Microsoft Sentinel Workspaces

11 mins

3. Setting Up Microsoft Sentinel

6 mins

4. Microsoft Sentinel Roles

7 mins

5. Microsoft Sentinel Data Storage

15 mins

Microsoft Sentinel Data Connectors

1. Data Sources and Prerequisites

14 mins

2. Configuring Data Connectors Via Policies

5 mins

3. Syslog and CEF Event Collectors

18 mins

4. Threat Intelligence Connectors

9 mins

5. Ingesting Custom Logs

11 mins

Microsoft Sentinel Analytics Rules

1. Intro to Sentinel Analytics Rules

1 min

2. Design and Configure Analytics Rules

9 mins

3. Activate Microsoft Security Analytics Rules

4 mins

4. Custom Analytics Rules

5 mins

5. Connector Provided Queries and Workflow

4 mins

6. Incident Creation Logic with KQL

14 mins

7. KQL Exercise

6 mins

8. Manage and Use Watchlists

18 mins

SOAR and Incident Response

1. Creating Playbooks

8 mins

2. Automation Rules

5 mins

3. Defender Playbooks

5 mins

4. Incidents Within Sentinel

15 mins

5. Multi-Workspace Incidents

5 mins

6. User and Entity Behavior Analytics (UEBA)

6 mins

Sentinel Workbooks, Notebooks and Hunting

1. Sentinel Workbooks

10 mins

2. Custom Workbooks

10 mins

3. Security Operations Efficiency Workbook

5 mins

4. Threat Hunting Queries

6 mins

5. Hunting With Livestreams

4 mins

6. Sentinel Bookmarks

5 mins

7. Hunting With Notebooks

12 mins

8. Configure and Use MSTICPy in Notebooks

17 mins

 

You’ll learn the fundamentals of detecting digital threats on a network, combating them once they’ve started, and seeking out ways to prevent them from happening in the first place with Microsoft and Azure tools. This course prepares learners for the SC-200 exam, which tests familiarity with Microsoft Defender, Sentinel and Defender for Cloud.

Associate-level cybersecurity professionals should take this course in Microsoft security operations, particularly if they already have familiarity with network security countermeasures but haven’t worked with Microsoft tools before. Analysts looking to earn certifications to boost their career should also take this course to prepare for the certifying exam for the Security Operations Analyst Associate certification.

Yes, this course is specially designed to match the test objectives of SC-200, the certifying exam for the Microsoft Certified: Security Operations Analyst Associate. But this course isn’t simply about cramming information for an exam, it’s largely focused on getting real-world practice and first-hand experience with the tools in safe, digital sandboxes.

If, for your job, you use Microsoft Defender for Cloud, Microsoft 365 Defender or Microsoft Sentinel, the certification you should aim for is the Microsoft Security Operations Analyst. You’ll need to pass SC-200, the certifying exam that tests your ability to mitigate, identify and resolve digital network threats with those three tools.

If you’re a small business owner or work in a one-person IT team, you might want to take this training so that you can learn what out-of-the-box security tools are available to you to safeguard networks. But IT professionals who are new to Microsoft, Azure, or their native security tools should take this course too.