© AFI par Edgenda inc.
Deploy Microsoft Defender for Endpoint to manage devices, investigate endpoints, handle incidents with Defender XDR, and use Advanced Hunting with Kusto Query Language (KQL) to detect specific threats.
Audience	Security Professionals SOC Analysts (Security Operations Center) System and Network Administrators Cybersecurity Engineers IT Professionals Security Consultants
Prerequisites	Experience using the Microsoft Defender portal Basic understanding of Microsoft Defender for Endpoint Basic understanding of Microsoft Sentinel Experience using Kusto Query Language (KQL) in Microsoft Sentinel
Objectives	Understanding Microsoft Defender XDR Threat Detection and Investigation Configuring and Managing Defender Solutions Incident Response Techniques Integration with Security Operations Using Advanced Threat Protection Features Implementing Best Practices
Teaching method	Instructor-Led Training (ILT) Hands-On Labs Interactive Demonstrations Scenario-Based Learning Group Activities Q&A Sessions Supplementary Resources
Contents	Mitigate incidents using Microsoft Defender Deploy the Microsoft Defender for Endpoint environment Configure for alerts and detections in Microsoft Defender for Endpoint Configure and manage automation using Microsoft Defender for Endpoint Perform device investigations in Microsoft Defender for Endpoint Defend against Cyberthreats with Microsoft Defender XDR lab exercises

Surround yourself with the best

Philippe Paradis

Certified Trainer and IT Consultant

With over 30 years of experience dedicated almost exclusively to training, Philippe Paradis is known for his energy, contagious sense of humour, and ability to turn every session into a memorable learning experience. He engages participants with passion, clarity, and just the right dose of playful madness. A Microsoft Certified Trainer (MCT) since 1996, Philippe holds a wide range of up-to-date certifications in the Microsoft Cloud ecosystem, including: • Azure Solutions Architect Expert • Azure Security Engineer Expert • Endpoint Administrator Expert • Microsoft 365 Administrator Expert • Azure Administrator Associate • Information Security Administrator Associate • Plus a dozen official Applied Skills badges His favourite environments include: Microsoft Azure, Intune, Microsoft 365, Copilot, Defender XDR, Purview, Sentinel, and MCM (SCCM), where he excels in architecture, security, governance and compliance.

Human

Digital Tools

Technology

Data Science

Organizational Strategy

Project Management

Change region

New

Defend against cyberthreats with Microsoft Defender XDR (SC-5004)

Upcoming sessions

Course outline

Surround yourself with the best