SC-200T00: Microsoft Security Operations Analyst
About Course
The SC-200T00: Microsoft Security Operations Analyst course is designed to provide learners with the knowledge and skills to mitigate threats using various Microsoft security solutions. It covers a comprehensive range of topics, including how to protect, detect, respond, and hunt for cybersecurity threats across Microsoft 365 Defender, Azure Defender, and Azure Sentinel. Learners will be equipped to set up Microsoft Defender for Endpoint, manage incidents, investigate alerts, and configure advanced threat protection features. They will also learn to safeguard identities with Azure AD Identity Protection, protect against threats in Microsoft 365, and secure cloud apps with Microsoft Cloud App Security. Additionally, the course delves into Azure Sentinel, teaching how to create queries using Kusto Query Language (KQL), configure the Azure Sentinel environment, connect logs, create detections, investigate threats, and perform proactive threat hunting. By mastering these skills, learners will be able to effectively perform device investigations, configure and manage automation, and mitigate attacks using the suite of Microsoft security tools. This course prepares them for the Microsoft Security Operations Analyst role and the SC-200 certification exam.