Applied Skills training courses are designed to validate specific skills by focusing on real-life scenarios. They offer a targeted alternative to traditional role-based certifications, focusing on the application of technical skills in work situations.

Get started with Microsoft Sentinel security operations by configuring the Microsoft Sentinel workspace, connecting Microsoft services and Windows security events to Microsoft Sentinel, configuring Microsoft Sentinel analytics rules, and responding to threats with automated responses.

Audience

Intermediate
Security Operations Analyst

Prerequisites

Fundamental understanding of Microsoft Azure
Basic understanding of Microsoft Sentinel
Experience using Kusto Query Language (KQL) in Microsoft Sentinel

*You need to have your own Azure subscription.

You need an Azure subscription to complete the exercises. If you don't have an Azure subscription, create a free account and add a subscription before you begin. If you're a student, you can take advantage of the Azure for students offer.

Contents

Create and manage Microsoft Sentinel workspaces
Connect Microsoft services to Microsoft Sentinel
Connect Windows hosts to Microsoft Sentinel
Threat detection with Microsoft Sentinel analysis
Automation in Microsoft Sentinel
Configuring SIEM security operations using Microsoft Sentinel

⭐ Discover more Applied Skills: Microsoft applied skills (afiexpertise.com)

Surround yourself with the best

Philippe Paradis

Certified Trainer and IT Consultant

With over 30 years of experience dedicated almost exclusively to training, Philippe Paradis is known for his energy, contagious sense of humour, and ability to turn every session into a memorable learning experience. He engages participants with passion, clarity, and just the right dose of playful madness. A Microsoft Certified Trainer (MCT) since 1996, Philippe holds a wide range of up-to-date certifications in the Microsoft Cloud ecosystem, including: • Azure Solutions Architect Expert • Azure Security Engineer Expert • Endpoint Administrator Expert • Microsoft 365 Administrator Expert • Azure Administrator Associate • Information Security Administrator Associate • Plus a dozen official Applied Skills badges His favourite environments include: Microsoft Azure, Intune, Microsoft 365, Copilot, Defender XDR, Purview, Sentinel, and MCM (SCCM), where he excels in architecture, security, governance and compliance.

Human

Digital Tools

Technology

Data Science

Organizational Strategy

Project Management

Change region

Configure SIEM security operations using Microsoft Sentinel (SC-5001)

Upcoming sessions

Course outline

Surround yourself with the best