SC-200: Defend against cyberthreats with Microsoft's security operations platform
The Microsoft Security Operations Analyst course is a four-day intermediate course for people in security operations roles who want to sharpen their skills in threat investigation, response and hunting. You will learn how to use Microsoft Sentinel, Microsoft Defender XDR and Microsoft Defender for Cloud to detect and mitigate cyberthreats, including configuring Microsoft Sentinel and using Kusto Query Language (KQL) for detection, analysis and reporting. The hands-on labs have been updated to reflect Microsoft Sentinel onboarded to Defender XDR.
The course suits security operations analysts and security engineers who want to reduce organisational risk by rapidly remediating active attacks and advising on better threat protection practices. It prepares you for the SC-200 exam and the Microsoft Certified: Security Operations Analyst Associate certification.