Type
Virtual
Classroom ILT
Skill Level
Available dates
Learning Path
Virtual
Duration
1 Day
TYPE
Virtual
Classroom ILT
LEARNING PATH
SKILL LEVEL
DURATION
AVAILABLE DATES
Introduction
Get started with Microsoft Sentinel security operations by configuring the Microsoft Sentinel workspace, connecting Microsoft services and Windows security events to Microsoft Sentinel, configuring Microsoft Sentinel analytics rules, and responding to threats with automated responses.
Pre-requisite
- Fundamental understanding of Microsoft Azure
- Basic understanding of Microsoft Sentinel
- Experience using Kusto Query Language (KQL) in Microsoft Sentinel
Course content
Module 1: Create and manage Microsoft Sentinel workspaces |
Learn about the architecture of Microsoft Sentinel workspaces to ensure you configure your system to meet your organization’s security operations requirements.
Lessons: |
|
Module 2: Connect Microsoft services to Microsoft Sentinel |
Learn how to connect Microsoft 365 and Azure service logs to Microsoft Sentinel.
Lessons: |
|
Module 3: Connect Windows hosts to Microsoft Sentinel |
One of the most common logs to collect is Windows security events. Learn how Microsoft Sentinel makes this easy with the Security Events connector.
Lessons: |
|
Module 4: Threat detection with Microsoft Sentinel analytics |
In this module, you learned how Microsoft Sentinel Analytics can help the SecOps team identify and stop cyber attacks.
Lessons: |
|
Module 5: Automation in Microsoft Sentinel |
By the end of this module, you’ll be able to use automation rules in Microsoft Sentinel to automated incident management.
Lessons: |
|
Module 6: Configure SIEM security operations using Microsoft Sentinel |
In this module, you learned how to configure SIEM security operations using Microsoft Sentinel.
Lessons: |
|
Associated certifications and exam
There is no Associated certification & Exam for this course.
Microsoft Overview
Skilled Microsoft engineers add significant value to the marketplace by reducing the cost of technology solutions whilst improving efficiency and fuelling innovation. Through authorized Microsoft training, Torque IT empowers engineers, developers and end-users to realise their full potential by providing them with the necessary knowledge and skills to optimise the adoption and use of Microsoft solutions.
Torque IT considers authorised Microsoft training to be an integral part of any Microsoft implementation. Microsoft authorised training, and associated certification, ensures that you get the most from your technology investment and that you are able to operate above the technology curve. Microsoft career certifications are universally recognised as demonstrating a high level of expertise and credibility for individuals and the organisations that employ them.
Authorized Microsoft training and certification is the industry standard for any solution that includes designing, selling, implementing, upgrading, managing, and operating Microsoft solutions.
For 19 years, Torque IT has maintained the status of Gold Learning Partner for Microsoft in South Africa. This is the highest level of accreditation that Microsoft awards to Learning Partners that specialize in technical, product, sales, development, end-user and solutions training.
These achievements reflect our commitment to providing our customers with quality skills development, enablement, training, and certification solutions that demonstrate exceptional depth, breadth, and expertise across Windows Server, Windows Client, Microsoft Virtualization, Microsoft Azure, Office 365, Exchange Server, SharePoint Server, Skype for Business, System Centre Server, Visual Studio and Microsoft Office technologies.
Torque is recognized by Microsoft, and the industry, as having met rigorous standards for educational competency, service, customer satisfaction and investment in Microsoft technologies that will prepare the next generation of IT industry professionals.