SC-5004MSMicrosoftMS-SC-50041.0<ul> <li>Experience using the Microsoft Defender portal</li><li>Basic understanding of Microsoft Defender for Endpoint</li><li>Basic understanding of Microsoft Sentinel</li><li>Experience using Kusto Query Language (KQL) in Microsoft Sentinel</li></ul><p>You&#039;ll need to have access to a Microsoft 365 E5 Tenant with a Microsoft Defender for Endpoint P2 license to perform the exercises.</p><h4>Mitigate incidents using Microsoft Defender</h4><ul> <li>Introduction</li><li>Use the Microsoft Defender portal</li><li>Manage incidents</li><li>Investigate incidents</li><li>Manage and investigate alerts</li><li>Manage automated investigations</li><li>Use the action center</li><li>Explore advanced hunting</li><li>Investigate Microsoft Entra sign-in logs</li><li>Understand Microsoft Secure Score</li><li>Analyze threat analytics with the Security Copilot Threat Intelligence Briefing Agent</li><li>Analyze reports</li><li>Configure the Microsoft Defender portal</li><li>Module assessment</li><li>Summary and resources</li></ul> <h4>Deploy the Microsoft Defender for Endpoint environment</h4><ul> <li>Introduction</li><li>Create your environment</li><li>Understand operating systems compatibility and features</li><li>Onboard devices</li><li>Manage access</li><li>Create and manage roles for role-based access control</li><li>Configure device groups</li><li>Configure environment advanced features</li><li>Module assessment</li><li>Summary and resources</li></ul> <h4>Configure for alerts and detections in Microsoft Defender for Endpoint</h4><ul> <li>Introduction</li><li>Configure advanced features</li><li>Configure alert notifications</li><li>Manage alert suppression</li><li>Manage indicators</li><li>Module assessment</li><li>Summary and resources</li></ul> <h4>Configure and manage automation using Microsoft Defender for Endpoint</h4><ul> <li>Introduction</li><li>Configure advanced features</li><li>Manage automation upload and folder settings</li><li>Configure automated investigation and remediation capabilities</li><li>Block at risk devices</li><li>Module assessment</li><li>Summary and resources</li></ul> <h4>Perform device investigations in Microsoft Defender for Endpoint</h4><ul> <li>Introduction</li><li>Use the device inventory list</li><li>Investigate the device</li><li>Use behavioral blocking</li><li>Detect devices with device discovery</li><li>Module assessment</li><li>Summary and resources</li></ul> <h4>Defend against Cyberthreats with Microsoft Defender XDR lab exercises</h4><ul> <li>Introduction</li><li>Configure the Microsoft Defender XDR environment</li><li>Deploy Microsoft Defender for Endpoint</li><li>Mitigate Attacks with Microsoft Defender for Endpoint</li><li>Summary</li></ul>- Experience using the Microsoft Defender portal - Basic understanding of Microsoft Defender for Endpoint - Basic understanding of Microsoft Sentinel - Experience using Kusto Query Language (KQL) in Microsoft Sentinel You'll need to have access to a Microsoft 365 E5 Tenant with a Microsoft Defender for Endpoint P2 license to perform the exercises.Mitigate incidents using Microsoft Defender - Introduction - Use the Microsoft Defender portal - Manage incidents - Investigate incidents - Manage and investigate alerts - Manage automated investigations - Use the action center - Explore advanced hunting - Investigate Microsoft Entra sign-in logs - Understand Microsoft Secure Score - Analyze threat analytics with the Security Copilot Threat Intelligence Briefing Agent - Analyze reports - Configure the Microsoft Defender portal - Module assessment - Summary and resources Deploy the Microsoft Defender for Endpoint environment - Introduction - Create your environment - Understand operating systems compatibility and features - Onboard devices - Manage access - Create and manage roles for role-based access control - Configure device groups - Configure environment advanced features - Module assessment - Summary and resources Configure for alerts and detections in Microsoft Defender for Endpoint - Introduction - Configure advanced features - Configure alert notifications - Manage alert suppression - Manage indicators - Module assessment - Summary and resources Configure and manage automation using Microsoft Defender for Endpoint - Introduction - Configure advanced features - Manage automation upload and folder settings - Configure automated investigation and remediation capabilities - Block at risk devices - Module assessment - Summary and resources Perform device investigations in Microsoft Defender for Endpoint - Introduction - Use the device inventory list - Investigate the device - Use behavioral blocking - Detect devices with device discovery - Module assessment - Summary and resources Defend against Cyberthreats with Microsoft Defender XDR lab exercises - Introduction - Configure the Microsoft Defender XDR environment - Deploy Microsoft Defender for Endpoint - Mitigate Attacks with Microsoft Defender for Endpoint - Summary1 day690.00675.00675.00940.00690.00690.00490.00690.00690.00690.00950.00