Overview
Implement the Microsoft Defender for Endpoint environment to manage devices, perform investigations on endpoints, manage incidents in Defender XDR, and use Advanced Hunting with Kusto Query Language (KQL) to detect unique threats.
- Level: Intermediate
- Product: Microsoft DefenderMicrosoft Defender for EndpointMicrosoft Defender XDR
- Role: Security Operations Analyst
- Subject: Threat protection
Skills Covered
- Mitigate incidents using Microsoft Defender
- Deploy the Microsoft Defender for Endpoint environment
- Configure for alerts and detections in Microsoft Defender for Endpoint
- Configure and manage automation using Microsoft Defender for Endpoint
- Perform device investigations in Microsoft Defender for Endpoint
- Perform device investigations in Microsoft Defender for Endpoint
Who Should Attend
Course Curriculum
Course Modules
Exam & Certification
Microsoft Applied Skills: Defend against cyberthreats with Microsoft Defender XDR
Validate your technical skills and open doors to new possibilities of advancement with Microsoft Applied Skills.
To earn this Microsoft Applied Skills credential, learners demonstrate the ability to use Microsoft Defender XDR to detect and respond to cyberthreats.
Candidates for this credential should be familiar with investigating and gathering evidence about attacks on endpoints. They should also have experience using Microsoft Defender for Endpoint and Kusto Query Language (KQL).
Tasks performed
- Configure a Defender XDR environment
- Manage devices by using Defender for Endpoint
- Use Defender XDR to manage incidents
- Manage investigations on an endpoint
- Perform Advanced Hunting with KQL to detect unique threats
