SC-5004 Defend against cyber threats with Microsoft Defender XDR
Cyber threats are becoming more targeted and harder to detect. In this training, you learn how Microsoft Defender XDR makes attacks visible – and how to stop them effectively.
Key topics
- Understand and classify current attack methods.
- Defend against threats using Microsoft Defender XDR.
- Combine security signals from multiple sources.
- Secure critical assets and user accounts.
- Run Security Operations Center processes efficiently.
Prerequisite
Familiarity with IT security concepts, networking, and administrative workflows helps you get started right away.
Target group
Suited for anyone working in Security Operations or responsible for the security of digital infrastructure – from analysts to IT administrators.
After this training, you have the tools to not just detect attacks but actively stop them and make your team more secure.
- Navigate the Microsoft Defender portal
- Manage and prioritize security incidents
- Investigate incidents systematically
- Review and act on alerts
- Coordinate automated security checks
- Use the Action Center effectively
- Run advanced hunting queries
- Analyze sign-in logs in Microsoft Entra
- Assess security posture with Secure Score
- Interpret and apply threat intelligence
- Evaluate security reports
- Configure the Microsoft Defender platform
- Build a test environment
- Verify operating systems and supported features
- Onboard and integrate devices
- Configure access permissions
- Create and assign roles
- Set up device groups
- Enable advanced configuration options
- Configure advanced features
- Define alert notification settings
- Manage alert filters and suppression rules
- Maintain and manage indicators
- Adjust feature settings
- Control upload folders and paths
- Configure automated investigation rules
- Isolate devices when needed
- Use the device inventory overview
- Investigate individual devices
- Restrict device access when required
- Enable automatic device discovery
- Configure Microsoft Defender XDR
- Activate Defender protection on devices
- Detect and block cyberattacks