Reviews 4,2
Reviews 4,5
100% fundable

SC-200 Microsoft Security Operations Analyst

Professional IT security requires more than just individual tools. It calls for well-thought-out processes, continuous monitoring, and precise analysis of security events. Microsoft-based security operations combine these requirements in integrated platforms.

Key topics

  • Central evaluation of security-related data.
  • Handling alerts and incidents.
  • Threat intelligence and attack detection.
  • Use of Microsoft Sentinel.
  • Automation of response steps.
  • Operation of secure cloud and hybrid environments.

Prerequisites
Knowledge of IT systems, cloud services, and basic security principles is required.

Target audience
IT security professionals, administrators, SOC employees, and technically oriented roles with security responsibilities.

Structured security operations increase transparency and response speed. The content supports sustainable security operations that withstand current threats and reliably secure modern IT architectures.

Course content
  • Set up threat protection in Microsoft 365
  • Handle security incidents with Microsoft 365 Defender
  • Secure identities with Azure AD Identity Protection
  • Reduce risks with Microsoft Defender for Office 365
  • Safeguard your environment with Microsoft Defender for Identity
  • Protect cloud apps with Microsoft Defender for Cloud Apps
  • Detect and respond to data loss alerts in Microsoft 365
  • Control and limit insider risks in Microsoft 365
  • Secure endpoints with Microsoft Defender for Endpoint
  • Set up and configure the Defender environment
  • Apply Windows security improvements
  • Analyze and investigate devices
  • Initiate response actions on devices
  • Forensically evaluate evidence and entities
  • Set up and manage automation workflows
  • Configure alert rules and detection policies
  • Apply vulnerability management effectively
  • Develop a protection strategy for cloud workloads with Microsoft Defender for Cloud
  • Onboard Azure resources to Microsoft Defender for Cloud
  • Integrate non-Azure resources into Microsoft Defender for Cloud
  • Configure and operate Cloud Security Posture Management
  • Understand workload protection in Microsoft Defender for Cloud
  • Remediate security alerts in Microsoft Defender for Cloud
  • Write KQL queries for Microsoft Sentinel
  • Evaluate KQL query results
  • Build cross-table KQL queries
  • Process and transform Sentinel data with KQL
  • Learn the architecture and capabilities of Microsoft Sentinel
  • Configure workspaces in Microsoft Sentinel
  • Query log data in Microsoft Sentinel
  • Create and use watchlists in Microsoft Sentinel
  • Integrate threat intelligence into Microsoft Sentinel
  • Onboard data sources via connectors in Microsoft Sentinel
  • Connect Microsoft services to the Sentinel environment
  • Link Microsoft 365 Defender with Microsoft Sentinel
  • Add Windows systems as data sources in Sentinel
  • Onboard CEF logs to Microsoft Sentinel
  • Configure syslog sources in Microsoft Sentinel
  • Integrate threat indicators into Microsoft Sentinel
  • Configure analytics rules for threat detection in Sentinel
  • Use automation capabilities in Microsoft Sentinel
  • Handle threats automatically with Sentinel playbooks
  • Work through incidents in Microsoft Sentinel systematically
  • Use entity behavior analytics for threat detection
  • Normalize log data in Microsoft Sentinel
  • Build dashboards and queries for monitoring in Sentinel
  • Manage Sentinel content and solution packages
  • Understand the foundations and methodology of threat hunting in Sentinel
  • Conduct active threat hunts in Microsoft Sentinel
  • Create and evaluate search jobs in Microsoft Sentinel
  • Use Jupyter notebooks for threat hunting in Sentinel

Your Personal Path to the Right Continuing Education Program—We Provide Personalized Guidance

Our experienced educational advisors will guide you from your very first question all the way to the start of your continuing education program.