Microsoft Security Operations Analyst

This course is tailored for individuals in Security Operations roles and is designed to help learners prepare for the SC-200: Microsoft Security Operations Analyst exam.

Discover how to investigate, respond to, and proactively hunt for threats using Microsoft Sentinel, Microsoft Defender XDR, and Microsoft Defender for Cloud. This course teaches you how to mitigate cyber threats with these technologies. You will specifically learn to configure and utilize Microsoft Sentinel, as well as leverage Kusto Query Language (KQL) for detection, analysis, and reporting.

SC-200: Mitigate threats using Microsoft Defender XDR
SC-200: Mitigate threats using Microsoft Copilot for Security
SC-200: Mitigate threats using Microsoft Purview
SC-200: Mitigate threats using Microsoft Defender for Endpoint
SC-200: Mitigate threats using Microsoft Defender for Cloud
SC-200: Create queries for Microsoft Sentinel using Kusto Query Language (KQL)
SC-200: Configure your Microsoft Sentinel environment
SC-200: Connect logs to Microsoft Sentinel
SC-200: Create detections and perform investigations using Microsoft Sentinel
SC-200: Perform threat hunting in Microsoft Sentinel

General IT knowledge or experience working in an IT environment is recommended.