We provide virtual course about Masterclass: Configuring and Managing Microsoft Defender for Endpoint in english. During this 3-day super intensive training you will gain crucial cybersecurity knowledge and skills in terms of Configuring and Managing Microsoft Defender for Endpoint.
Moreover, you will be able to:
• Get the highest quality and unique learning experience, the class is limited to 20 participants by default
• Get the opportunity to interact with our world-renowned Experts
• Go through CQURE’s custom lab exercises and practice them after the course
• Receive a lifelong certification after completing the course
Why this course:
This is a 3-day deep dive course on configuring and managing Microsoft Defender for endpoint, a must-go for enterprise administrators, security officers and architects. It is delivered by one of the best people in the market in the security field and what is more, this is an international Live Virtual Class so you will be able to share the learning experience with a group of IT pros from around the world without leaving your home or office!
Course outline:
This live virtual class consists of 3 modules in terms of configuring and managing Microsoft Defender for endpoint. They include essential theory combined with individual practice during the exercises as well as loads of hands-on tools and real-case scenarios.
Agenda:
Module 1 - Microsoft 365 Defender for Endpoint - EDR:
• Intro 101 to Microsoft Defender ecosystem
• EDR deployment strategies
• EDR installation and configuration
• Fine tuning and hardening of EDR configuration
• Managing and Maintaining Security Posture
• Troubleshooting Common Issues
• Automation with ServiceNow and 3rd party
Module 2 - Integration with Defender Family:
• Microsoft 365 Defender Stack Overview
• Microsoft Defender for Identity
• Microsoft Defender for Cloud Apps
• Microsoft Defender for Cloud
• Microsoft Defender for Server
• EDR integration with Microsoft Azure Sentinel
Module 3 - Security Operations with Microsoft EDR (Defender for Endpoints) Advanced Threat Hunting with Defender:
• EDR integration with Microsoft Azure Sentinel
• Security Operations best practices with Microsoft EDR and Sentinel
• How to manage Incidents inside EDR and Sentinel
• Kusto language 101 - basic and advanced queries
• Advanced Hunting
• Hacker ways to hide malware and bypass EDR
• External Attack Surface Management and integration with Sentinel
Target audience:
SOC analysts, Enterprise administrators, infrastructure architects, security professionals, systems engineers, network administrators, IT professionals, security consultants and other people responsible for implementing network and perimeter security.
Prerequisites:
• To attend this training, you should have a good hands-on experience in administering Windows infrastructure and basic around public cloud concept (Office 365, Azure).
Language:
• English course material, english speaking instructor
Course material:
The course fee includes lab exercises, course materials and certification
Certification:
After finishing the course, you will be granted a CQURE Certificate of Completion. Please note that after completing the course you will also be eligible for CPE points!