Address
Level 8/25 Restwell Street, Bankstown NSW 2200, Australia
Business Hours
Monday to Friday: 10AM - 6PM
Weekend: CLOSED
SC-5001: Configure SIEM security operations using Microsoft Sentinel
This intermediate course teaches security operations analysts how to configure and manage SIEM operations with Microsoft Sentinel. You’ll learn to set up Sentinel workspaces, connect Microsoft services and Windows hosts, create analytics rules and automate incident responses. The focus is on detecting and responding to threats efficiently in cloud environments.
Duration
8 hours
Modules
1 Modules
Course type
Microsoft
Course Overview
This intermediate-level learning path teaches security operations analysts how to configure and manage SIEM operations using Microsoft Sentinel. You’ll learn to set up Sentinel workspaces, connect Microsoft services and Windows hosts, configure analytics rules, and automate incident responses. The course emphasizes threat detection, response, and operational efficiency in cloud-based environments.
Before You Begin
- Fundamental understanding of Microsoft Azure
- Basic knowledge of Microsoft Sentinel
- Experience using Kusto Query Language (KQL)
- Azure subscription for hands-on exercises
Key outcomes
- Set Up Sentinel Workspaces Configure workspaces for centralized security monitoring.
- Connect Services & Hosts Integrate Microsoft services and Windows machines for data collection.
- Detect & Respond to Threats Use analytics and Logic Apps for automated incident response.
- Configure SIEM Operations Enable SIEM tools for real-time threat detection and governance.
Tools you’ll use
Azure Portal
Microsoft Sentinel
Kusto Query Language (KQL)
Azure Logic Apps
Azure Monitor
Skills you’ll gain
- Sentinel Workspace Configuration
- Log Ingestion Setup
- Threat Detection Rules
- Incident Response Automation
- SIEM Operations Monitoring
- Service Connection Management
- Analytics Rule Tuning
- Security Event Analysis
What You’ll Learn
1 module
1Lesson 1: Configure SIEM security operations using Microsoft Sentinel
Module 1: Create and manage Microsoft Sentinel workspaces Module 1: Create and manage Microsoft Sentinel workspaces Module 3: Connect Windows hosts to Microsoft Sentinel Module 4: Threat detection with Microsoft Sentinel analytics Module 5: Automation in Microsoft Sentinel Module 6: Configure SIEM security operations using Microsoft Sentinel
Certification & Credentials
Certificate track
8 hours
Frequently asked questions
What is Microsoft Sentinel used for?
It’s a cloud-native SIEM and SOAR solution for threat detection, investigation, and response.
Do I need an Azure subscription?
Yes, an active Azure subscription is required for hands-on labs and exercises.
Is this course suitable for beginners?
It’s best for users with basic Azure and Sentinel knowledge.
What kind of threats can Sentinel detect?
It detects threats from Microsoft 365, Azure services, Windows hosts, and custom sources.
Can I automate responses in Sentinel?
Yes, using Logic Apps, you can automate incident management and response workflows.
| Duration | 8 hours |
|---|---|
| Modules | 1 Modules |
| Course type | Microsoft |
| Category | Microsoft |
| Prerequisites | Fundamental understanding of Microsoft Azure, Basic knowledge of Microsoft Sentinel, Experience using Kusto Query Language (KQL), Azure subscription for hands-on exercises |
Be the first to review “SC-5001: Configure SIEM security operations using Microsoft Sentinel”
Reviews
There are no reviews yet.