Login     Signup
   info@zetlantechnologies.com        +91-8680961847

Microsoft Security Operations Analyst

SC-200: Microsoft Security Operations Analyst you reduce organizational risk by:Rapidly Remediating active Attacks in the Environment, Advising on Improvements to Threat Protection Practices, Referring Violations of Organizational Policies to appropriate Stakeholders

As an Microsoft Security Operations Analyst,, Monitor, Identify, Investigate, and respond to Threats in Multicloud Environments by using:Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft 365 Defender, Third-party Security Solutions.

1. Configure settings in Microsoft Defender XDR

  • Configure a connection from Defender XDR to a Sentinel workspace
  • Configure alert and vulnerability notification rules
  • Configure Microsoft Defender for Endpoint advanced features
  • Configure endpoint rules settings, including indicators and web content filtering
  • Manage automated investigation and response capabilities in Microsoft Defender XDR
  • Configure automatic attack disruption in Microsoft Defender XDR

  • Configure and manage device groups, permissions, and automation levels in Microsoft Defender for Endpoint
  • Identify and remediate unmanaged devices in Microsoft Defender for Endpoint
  • Manage resources by using Azure Arc
  • Connect environments to Microsoft Defender for Cloud (by using multi-cloud account management)
  • Discover and remediate unprotected resources by using Defender for Cloud
  • Identify and remediate devices at risk by using Microsoft Defender Vulnerability Management

  • Plan a Microsoft Sentinel workspace
  • Configure Microsoft Sentinel roles
  • Specify Azure RBAC roles for Microsoft Sentinel configuration
  • Design and configure Microsoft Sentinel data storage, including log types and log retention
  • Manage multiple workspaces by using Workspace manager and Azure Lighthouse

  • Identify data sources to be ingested for Microsoft Sentinel
  • Configure and use Microsoft connectors for Azure resources, including Azure Policy and diagnostic settings
  • Configure bidirectional synchronization between Microsoft Sentinel and Microsoft Defender XDR
  • Configure bidirectional synchronization between Microsoft Sentinel to Microsoft Defender for Cloud
  • Plan and configure Syslog and Common Event Format (CEF) event collections
  • Plan and configure collection of Windows Security events by using data collection rules, including Windows Event Forwarding (WEF)
  • Configure threat intelligence connectors, including platform, TAXII, upload indicators API, and MISP
  • Create custom log tables in the workspace to store ingested data

  • Configure policies for Microsoft Defender for Cloud Apps
  • Configure policies for Microsoft Defender for Office
  • Configure security policies for Microsoft Defender for Endpoints, including attack surface reduction (ASR) rules
  • Configure cloud workload protections in Microsoft Defender for Cloud

  • Configure and manage custom detections
  • Configure alert tuning
  • Configure deception rules in Microsoft Defender XDR

  • Classify and analyze data by using entities
  • Configure scheduled query rules, including KQL
  • Configure near-real-time (NRT) query rules, including KQL
  • Manage analytics rules from Content hub
  • Configure anomaly detection analytics rules
  • Configure the Fusion rule
  • Query Microsoft Sentinel data by using ASIM parsers
  • Manage and use threat indicators

  • Investigate and remediate threats to Microsoft Teams, SharePoint Online, and OneDrive
  • Investigate and remediate threats in email by using Microsoft Defender for Office
  • Investigate and remediate ransomware and business email compromise incidents identified by automatic attack disruption
  • Investigate and remediate compromised entities identified by Microsoft Purview data loss prevention (DLP) policies
  • Investigate and remediate threats identified by Microsoft Purview insider risk policies
  • Investigate and remediate alerts and incidents identified by Microsoft Defender for Cloud
  • Investigate and remediate security risks identified by Microsoft Defender for Cloud Apps
  • Investigate and remediate compromised identities in Microsoft Entra ID
  • Investigate and remediate security alerts from Microsoft Defender for Identity
  • Manage actions and submissions in the Microsoft Defender portal

  • Investigate timeline of compromised devices
  • Perform actions on the device, including live response and collecting investigation packages
  • Perform evidence and entity investigation

  • Investigate threats by using unified audit Log
  • Investigate threats by using Content Search
  • Perform threat hunting by using Microsoft Graph activity logs

  • Evaluate security posture for productivity and collaboration workloads by using metrics, including Microsoft Secure Score and Microsoft Defender for Cloud secure score
  • Design a Microsoft 365 Defender solution
  • Design secure configurations and operational practices for Microsoft 365 workloads and data

  • Triage incidents in Microsoft Sentinel
  • Investigate incidents in Microsoft Sentinel
  • Respond to incidents in Microsoft Sentinel

  • Create and configure automation rules
  • Create and configure Microsoft Sentinel playbooks
  • Configure analytic rules to trigger automation
  • Trigger playbooks manually from alerts and incidents
  • Run playbooks on On-premises resources

  • Identify threats by using Kusto Query Language (KQL)
  • Interpret threat analytics in the Microsoft Defender portal
  • Create custom hunting queries by using KQL

  • Analyze attack vector coverage by using the MITRE ATT&CK in Microsoft Sentinel
  • Customize content gallery hunting queries
  • Use hunting bookmarks for data investigations
  • Monitor hunting queries by using Livestream
  • Retrieve and manage archived log data
  • Create and manage search jobs

  • Activate and customize Microsoft Sentinel workbook templates
  • Create custom workbooks that include KQL
  • Configure visualizations


Fees Structure : 12500 INR / 150 USD
Total No of Class : 78 Video Class
Class Duration : 32:30 Working Hours
Download Feature : Download Avalable
Technical Support : Call / Whatsapp : +91 8680961847
Working Hours : Monday to Firday 9 AM to 6 PM
Payment Mode : Credit Card / Debit Card / NetBanking / Wallet (Gpay/Phonepay/Paytm/WhatsApp Pay)

Brochure       Buy Now       Sample Demo

Fees Structure : 18500 INR / 225 USD
Class Duration : 45 Days
Class Recording : Live Class Recording available
Class Time : Monday to Firday 1.5 hours per day / Weekend 3 Hours per day
Technical Support : Call / Whatsapp : +91 8680961847
Working Hours : Monday to Firday 9 AM to 6 PM
Payment Mode : Credit Card / Debit Card / NetBanking / Wallet (Gpay/Phonepay/Paytm/WhatsApp Pay)

Download Brochure       Pay Online

Information Technologies

Why People Like us!

For over a decade, we have been on a mission: helping everyone grow up in IT Industry. Today, we are asking that you join us.

Read More

More Info

About Us Contact Us Privacy Policy Terms & Condition Refund Policy FAQs & Help

Account

My Account Course Details Shopping Cart Wishlist Order History Payment Details

Contact

Address: Chennai, Tamilnadu, India

Email: info@zetlantechnologies.com

Phone: +91 8680961847

Payment Accepted

Zetlan Technologies, All right reserved.