Cart 0
Training
SC-5001: Configure SIEM security operations using Microsoft Sentinel
Course Information
Course Name
SC-5001: Configure SIEM security operations using Microsoft Sentinel
Duration
1 Day
Overview
Audience Profile
Prerequisities
At Course Completion
Course Outline
Overview
Get started with Microsoft Sentinel security operations by configuring the Microsoft Sentinel workspace, connecting Microsoft services and Windows security events to Microsoft Sentinel, configuring Microsoft Sentinel analytics rules, and responding to threats with automated responses.
Overview
Overview
Get started with Microsoft Sentinel security operations by configuring the Microsoft Sentinel workspace, connecting Microsoft services and Windows security events to Microsoft Sentinel, configuring Microsoft Sentinel analytics rules, and responding to threats with automated responses.
Audience Profile
Prerequisities
Prerequisites
- Fundamental understanding of Microsoft Azure
- Basic understanding of Microsoft Sentinel
- Experience using Kusto Query Language (KQL) in Microsoft Sentinel
At Course Completion
Course Outline
Course Outline
Module 1: Create and manage Microsoft Sentinel workspaces
Module 2: Connect Microsoft services to Microsoft Sentinel
Module 3: Connect Windows hosts to Microsoft Sentinel
Module 4: Threat detection with Microsoft Sentinel analytics
Module 5: Automation in Microsoft Sentinel
Module 6: Configure SIEM security operations using Microsoft Sentinel
