Address
Level 8/25 Restwell Street, Bankstown NSW 2200, Australia
Business Hours
Monday to Friday: 10AM - 6PM
Weekend: CLOSED
SC-5004: Defend against cyberthreats with Microsoft Defender XDR
This intermediate course gives security operations analysts the skills to defend against cyberthreats with Microsoft Defender XDR. You’ll learn to deploy and configure Microsoft Defender for Endpoint, manage incidents, investigate devices, and use Advanced Hunting with Kusto Query Language (KQL) to detect and respond to threats across your environment.
Duration
8 Hours (1 Day)
Modules
1 Modules
Course type
Microsoft
Course Overview
This intermediate-level learning path equips security operations analysts with the skills to defend against cyberthreats using Microsoft Defender XDR. You’ll learn to deploy and configure Microsoft Defender for Endpoint, manage incidents, perform device investigations, and use Advanced Hunting with Kusto Query Language (KQL) to detect and respond to threats across your environment.
Before You Begin
- Experience using the Microsoft Defender portal
- Basic understanding of Microsoft Defender for Endpoint
- Familiarity with Microsoft Sentinel
- Experience with Kusto Query Language (KQL)
Key outcomes
- Deploy Defender for Endpoint Set up endpoint protection across devices and workloads.
- Investigate & Respond to Alerts Manage incidents and automate responses with XDR tools.
- Hunt Threats with KQL Use advanced queries for proactive threat detection.
- Analyze Security Intelligence Review reports and insights for informed decision-making.
Tools you’ll use
Microsoft Secure Score
Microsoft Defender XDR
Microsoft Defender Portal
Kusto Query Language (KQL)
Skills you’ll gain
- Security Incident Investigation
- Endpoint Protection Setup
- Automated Threat Response
- Advanced Threat Hunting
- KQL Querying Skills
- Threat Analytics Review
- Incident Workflow Automation
- SIEM Data Analysis
What You’ll Learn
1 module
1Lesson 1: Defend against cyberthreats with Microsoft Defender XDR
Module 1: Mitigate incidents using Microsoft Defender Module 2: Deploy the Microsoft Defender for Endpoint environment Module 3: Configure for alerts and detections in Microsoft Defender for Endpoint Module 4: Configure and manage automation using Microsoft Defender for Endpoint Module 5: Perform device investigations in Microsoft Defender for Endpoint
Certification & Credentials
Certificate track
8 Hours (1 Day)
Target Audience
Intended roles
- Cybersecurity Engineer
Frequently asked questions
What is Microsoft Defender XDR?
It’s an extended detection and response solution that integrates multiple Defender products for unified threat protection.
Do I need a Microsoft 365 E5 license?
Yes, access to a Microsoft 365 E5 tenant with Defender for Endpoint P2 is required for exercises.
Is this course hands-on?
Yes, it includes practical labs and exercises for real-world threat scenarios.
What is Advanced Hunting?
It’s a feature in Defender XDR that uses KQL to query and detect threats across your environment.
Who should take this course?
Security operations analysts and IT professionals responsible for threat detection and response.
| Duration | 8 Hours (1 Day) |
|---|---|
| Modules | 1 Modules |
| Course type | Microsoft |
| Category | Microsoft |
| Intended roles | Cybersecurity Engineer |
| Prerequisites | Experience using the Microsoft Defender portal, Basic understanding of Microsoft Defender for Endpoint, Familiarity with Microsoft Sentinel, Experience with Kusto Query Language (KQL) |
Be the first to review “SC-5004: Defend against cyberthreats with Microsoft Defender XDR”
Reviews
There are no reviews yet.