Students should learn how security operations analysts secure information technology systems for organizations by reducing organizational risk, rapidly remediating active attacks, advising on improvements to threat protection practices, and referring violations to appropriate stakeholders.

The subject covers threat management, monitoring, and response using a variety of security solutions across the organizational environment. The content covers investigating, responding to, and hunting for threats using Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft 365 Defender, and third-party security products, including the configuration and deployment of these technologies. On successful completion students should be able to:

  • Mitigate threats using Microsoft 365 Defender
  • Mitigate threats using Microsoft Defender for Cloud
  • Mitigate threats using Microsoft Sentinel