SC-200: Manage a Security Operations Environment
This course will teach you how to manage a security operations environment using Microsoft XDR in preparation for the SC-200 exam.
What you'll learn
The ever-evolving cyber threat landscape demands that organizations prioritize the strategic management of their Security Operations Environment. In this course, SC-200: Manage a Security Operations Environment, you’ll learn how to effectively manage a Microsoft Security Operations Environment comprising Microsoft XDR. First, you’ll explore how to master the defender XDR Configuration. Next, you’ll discover how to take control of your assets and environment by configuring Microsoft XDR and its components. Finally, you’ll learn how to streamline your security operations with Microsoft Sentinel. When you’re finished with this course, you’ll have the skills and knowledge of managing a security operations environment needed for the SC-200 exam.
Table of contents
- Module Introduction 2m
- Defender XDR Overview 5m
- Components of a Modern SOC 4m
- Understanding an SOC Model 6m
- An Overview of Defender's Advanced Features 8m
- Setting up Notification Rules 5m
- Creating Custom Indicators 7m
- Defining Web Content Filtering 4m
- Automatic Attack Disruption 4m
- Module Summary 1m
- Module Introduction 2m
- Automated Investigation and Response 3m
- Setting up Device Groups 5m
- Controlling Permissions within Defender 2m
- Working with Vulnerability Management 5m
- Setting up Device Discovery 5m
- Manage Resources with Azure Arc 2m
- Integrating AWS into Defender for Cloud 3m
- Integrating GCP into Defender for Cloud 2m
- Working with Defender for Cloud Security Alerts 2m
- Module Summary 1m
- Module Introduction 1m
- Planning a Sentinel Workspace 3m
- Creating a Workspace and Working with Retention Settings 4m
- Configure Microsoft Sentinel Roles 4m
- Manage Multiple Workspaces with Workspace Manager 2m
- Setting up Workspace Manager 3m
- Identify Data Sources to Be Ingested 3m
- Ingesting CEF and SYSLOG Data 5m
- Connecting Microsoft Defender XDR 3m
- Enabling Defender for Cloud Bi-directional Synchronization 2m
- Module Summary 1m