Defend Against Cyberthreats with Microsoft’s Security Operations Platform (SC-200)

Course 8591 Advantage Plan Course

  • Duration: 4 days
  • Exam Voucher: Yes
  • Language: English
  • Level: Intermediate

This course teaches security professionals how to investigate, respond to, and proactively hunt for cyberthreats using Microsoft’s security operations platform. Participants gain hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender for Cloud, and Microsoft Security Copilot, while learning how to analyze threats, mitigate incidents, and reduce organizational risk. The course also prepares learners for the SC-200 certification exam.

Defend Against Cyberthreats with Microsoft’s Security Operations Platform (SC-200) Training Delivery Methods

  • In-Person

  • Online

Defend Against Cyberthreats with Microsoft’s Security Operations Platform (SC-200) Training Information

By the end of this course, participants will be able to:

  • Investigate and respond to security incidents
  • Perform proactive threat hunting
  • Configure and manage Microsoft Sentinel
  • Write and use KQL queries for detection and analysis
  • Leverage Microsoft Security Copilot for security operations
  • Reduce organizational risk through effective threat mitigation

Target Audience

  • Security Operations Analysts
  • Security Engineers
  • Professionals responsible for threat detection, response, and remediation

Technologies Covered

  • Microsoft Defender XDR
  • Microsoft Defender for Endpoint
  • Microsoft Defender for Cloud
  • Microsoft Sentinel
  • Microsoft Security Copilot
  • Kusto Query Language (KQL)

Defend Against Cyberthreats with Microsoft’s Security Operations Platform (SC-200) Training Outline

1. Mitigate Threats Using Microsoft Defender XDR

  • Incident detection and investigation
  • Threat mitigation across Defender tools

2. Mitigate Threats Using Microsoft Security Copilot

  • Using Copilot to support investigations
  • Enhancing analyst productivity with AI

3. Mitigate Threats Using Microsoft Purview

  • Managing and investigating data-related threats
  • Supporting compliance and risk reduction

4. Mitigate Threats Using Microsoft Defender for Endpoint

  • Endpoint threat detection and response
  • Managing incidents across devices

5. Mitigate Threats Using Microsoft Defender for Cloud

  • Protecting cloud workloads
  • Identifying and responding to cloud-based threats

6. Create Queries Using Kusto Query Language (KQL)

  • Writing KQL queries
  • Performing threat analysis and reporting

7. Configure Microsoft Sentinel

  • Setting up and managing Sentinel environments
  • Working with Log Analytics

8. Connect Logs to Microsoft Sentinel

  • Connecting data sources
  • Managing log ingestion and visibility

9. Create Detections and Perform Investigations

  • Building analytics rules
  • Investigating and remediating threats

10. Perform Threat Hunting in Microsoft Sentinel

  • Proactive threat hunting techniques
  • Identifying hidden or advanced threats

Need Help Finding The Right Training Solution?

Our training advisors are here for you.

Defend Against Cyberthreats with Microsoft’s Security Operations Platform (SC-200) Training FAQs

Yes! This class prepares an attendee for the Microsoft Exam SC-200: Microsoft Security Operations Analyst.

This course is ideal for:

  • Security Operations Analysts seeking hands-on experience with Microsoft security tools.
  • Security Engineers responsible for configuring and managing threat detection systems.
  • IT Professionals transitioning into cybersecurity roles focused on cloud and endpoint protection.

Participants will gain practical skills to secure organizational environments and respond effectively to cyber threats.

Please reach out to info@learningtree.com after your course to obtain your exam voucher.