This course is designed to equip participants with the knowledge and skills required to manage security operations and defend against cyberthreats using Microsoft security technologies.

Participants will learn how to investigate security incidents, respond to threats, perform threat hunting, configure Microsoft Sentinel, use Kusto Query Language for detection and analysis, and work with Microsoft Defender XDR and Microsoft Defender for Cloud. The course also introduces key security operations practices such as monitoring, alert management, incident response, and reporting.

Through structured learning, practical scenarios, and exam-focused guidance, participants will gain the confidence to support security operations, strengthen threat response capabilities, and prepare for the Microsoft Security Operations Analyst certification exam.

This course is suitable for security professionals who are responsible for monitoring, investigating, responding to, and hunting for cyberthreats in Microsoft cloud and hybrid environments.

It is especially suitable for:

• Security operations analysts
• Cybersecurity analysts
• Security engineers
• Threat hunters
• Incident response team members
• Microsoft 365 security administrators
• Azure security administrators
• IT professionals supporting security monitoring and response
• Professionals preparing for the Microsoft Security Operations Analyst certification exam

Participants should have basic knowledge of Microsoft security services, cloud computing, and cybersecurity operations.

Before attending this course, participants are recommended to have:

• Basic understanding of Microsoft Azure and Microsoft 365 services
• Familiarity with cybersecurity concepts and threat detection
• Basic knowledge of security monitoring and incident response
• Understanding of identity, access, devices, applications, and cloud workloads
• Some experience with Microsoft Defender, Microsoft Sentinel, or Kusto Query Language is helpful but not mandatory

At the end of this course, participants will be able to:

• Investigate and respond to security incidents using Microsoft Sentinel and Microsoft Defender XDR
• Use Kusto Query Language to perform detection, analysis, and reporting
• Monitor and protect cloud workloads using Microsoft Defender for Cloud
• Perform threat hunting and improve security operations workflows
• Prepare for the Microsoft Security Operations Analyst certification exam

• Introduction to Microsoft security operations and the Security Operations Analyst role
• Investigating and responding to threats using Microsoft Defender XDR
• Monitoring and protecting cloud workloads with Microsoft Defender for Cloud
• Configuring Microsoft Sentinel for security monitoring, analytics, and incident management
• Using Kusto Query Language for threat detection, investigation, and reporting
• Performing threat hunting, alert analysis, and incident response workflows
• Reviewing key SC-200 exam objectives and preparing for Microsoft Security Operations Analyst certification