Applied Skills
Microsoft Learn
Set up the Sentinel hunting environmentHunt for threats using Microsoft SentinelDetect threats with Microsoft Sentinel analyticsCreate a playbook in Microsoft SentinelSet up the Sentinel incident management environmentInvestigate an incident in Microsoft SentinelInstall Microsoft Sentinel Content Hub solutions and data connectorsConfigure a data connector Data Collection RulePerform a simulated attack to validate analytic and automation rulesConnect Microsoft Sentinel to Microsoft Defender XDRInvestigate and respond with Security CopilotVisualize data using Microsoft Sentinel WorkbooksDeploy Microsoft Sentinel to the Microsoft Defender portalHarden and monitor endpoints with security policiesExplore Microsoft Defender for Cloud (interactive guide)Investigate a Microsoft Purview Data Loss Prevention alertConduct a Microsoft Purview eDiscovery searchCreate a communication compliance policyInvestigate insider risk alerts in Microsoft PurviewConnect to resources with Kusto Query LanguageReturn rows with the Kusto Query Language take operatorReorder returned data by using the sort operatorFilter data by using the where operatorSelect columns to return by using the project operatorEnable a sign-in risk policy in Microsoft Entra ID ProtectionConfigure a multifactor authentication registration policySet up the Sentinel playbook environmentThreat response with Microsoft Sentinel playbooks (interactive guide)Set up the Sentinel analytics environmentExplore generative AIQuery and visualize data with Microsoft Sentinel WorkbooksConnect data to Microsoft Sentinel using data connectors (interactive guide)Create a Microsoft Sentinel workspaceOnboard devicesInvestigate security incidents in Microsoft Defender XDRPractice security administrationConfigure, protect, and detectManage your cloud security posture management (interactive guide)Understand vulnerability managementDefend against Cyberthreats with Microsoft Defender XDR lab exercisesStart recording activity in the Unified Audit LogDetect threats by using analytics rules in Microsoft SentinelUse a Microsoft Sentinel playbook to stop potentially compromised usersOnboard to Microsoft SentinelAutomatically check and record IP address reputation in incident in Microsoft SentinelExtract incident entities with non-native actions
Microsoft GitHub
Explore Microsoft Defender XDRExplore Microsoft Security CopilotExplore Microsoft Purview Audit logsDeploy Microsoft Defender for EndpointMitigate Attacks with Microsoft Defender for EndpointCreate queries for Microsoft Sentinel using Kusto Query Language (KQL)Configure your Microsoft Sentinel environmentConnect data to Microsoft Sentinel using data connectorsConnect Windows devices to Microsoft Sentinel using data connectorsConnect Linux hosts to Microsoft Sentinel using data connectorsConnect Defender XDR to Microsoft Sentinel using data connectorsCreate a Scheduled Query from a templateExplore Entity Behavior AnalyticsPrepare to perform simulated attacksConduct attacksCreate DetectionsInvestigate IncidentsDeploy ASIM parsersCreate workbooksUse Repositories in Microsoft SentinelPerform Threat Hunting with Microsoft Sentinel in the Microsoft Defender portalThreat Hunting using Data lake Notebooks in Microsoft Sentinel
