SC-5001: Configure SIEM security operations using Microsoft Sentinel

Get started with Microsoft Sentinel security operations by configuring the Microsoft Sentinel workspace, connecting Microsoft services and Windows security events to Microsoft Sentinel, configuring Microsoft Sentinel analytics rules, and responding to threats with automated responses.

MODULE 1
Create and manage Microsoft Sentinel workspaces
 
MODULE 2
Connect Microsoft services to Microsoft Sentinel
 
MODULE 3
Connect Windows hosts to Microsoft Sentinel
 
MODULE 4
Threat detection with Microsoft Sentinel analytics
 
MODULE 5
Automation in Microsoft Sentinel
 
MODULE 6
Configure SIEM security operations using Microsoft Sentinel

Prerequisites:
 

• Fundamental understanding of Microsoft Azure
• Basic understanding of Microsoft Sentinel
• Experience using Kusto Query Language (KQL) in Microsoft Sentinel

Applied Skills Assessment – Configure SIEM security operations using Microsoft Sentinel