SC-200 Microsoft Security Operations Analyst Training

9 Lesson

32 Hours

Add to Wishlist

igmGuru offers the best SC-200 Microsoft Security Operations Analyst training designed by experienced cybersecurity professionals. This course curriculum is designed around the SC-200 exam requirements for the Security Operations Analyst certification. In this training program you will learn how to work with Microsoft Sentinel, configure and manage Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity and use Microsoft 365 Defender to analyze and respond to security incidents. Join our SC-200 course now to strengthen your security operations skills and prepare confidently for the official Microsoft exam.

Enroll Now

Overview

Our course curriculum covers threat detection, incident investigation and response using Microsoft security solutions. You will gain hands on experience with KQL queries, threat hunting, automation and security monitoring. By the end of this SC-200 course you will be able to detect, investigate and remediate threats effectively in modern enterprise environments.

Prerequisites

Basic knowledge of Microsoft 365
Basic knowledge of Microsoft Azure services
Understanding of security, compliance, and identity concepts
Familiarity with Windows operating systems
Knowledge of networking fundamentals
Basic scripting concepts
Understanding of incident response and cyber threats
Familiarity with Kusto Query Language (KQL)

Who Should Take This Course

Security Operations (SOC) Analysts
Security Engineers
IT Administrators
Cloud Security Professionals
Microsoft 365 Security Administrators
Azure Security Engineers
SC-200 Certification Candidates

What Will You Learn

Microsoft Defender XDR
Microsoft Defender for Cloud
Microsoft Sentinel
Threat Detection and Incident Response
Kusto Query Language (KQL)
Threat Hunting and Investigation
Security Automation and Remediation
Security Posture Management

What You Will Be Able to Do After Completing this Training

Detect and Investigate Security Threats
Respond to Incidents Using Microsoft Defender XDR
Configure and Manage Microsoft Sentinel
Perform Threat Hunting with Kusto Query Language (KQL)
Implement Security Automation and Playbooks
Secure Cloud Workloads with Microsoft Defender for Cloud
Analyze Security Alerts and Log Data
Manage Threat and Vulnerability Remediation

Key Features

1 On 1 Training Option Available
24 X 7 Lifetime Support & Access
Small Batches Upto 10 Participants
Experienced & Professional Trainers
100% Job Assistance
Flexible Schedule

Course Curriculum

Lesson 1 - Mitigate threats using Microsoft Defender XDR

1. Introduction to Microsoft 365 threat protection

2. Mitigate incidents using Microsoft Defender XDR

3. Protect your identities with Entra ID Protection

4. Remediate risks with Microsoft Defender for Office 365

5. Safeguard your environment with Microsoft Defender for Identity

6. Secure your cloud apps and services with Microsoft Defender for Cloud Apps

7. Get started with Microsoft Copilot for Security

8. Fundamentals of Generative AI

9. Describe Microsoft Copilot for Security Fundamentals of Generative AI

10. Describe the core features of Microsoft Copilot for Security

11. Describe the embedded experiences of Microsoft Copilot for Security Fundamentals of Generative AI

Lesson 2 - Mitigate threats using Microsoft Purview

1. Microsoft Purview Compliance Solutions

2. Respond to data loss prevention alerts using Microsoft Purview

3. Manage insider risk in Microsoft Purview

4. Investigate threats using Content search in Microsoft Purview

5. Investigate threats using Microsoft Purview Audit Mitigate Threats using Microsoft Purview

Lesson 3 - Mitigate threats using Microsoft Defender for Endpoint

1. Protect against threats with Microsoft Defender for Endpoint

2. Deploy the Microsoft Defender for Endpoint environment

3. Implement Windows security enhancements with Microsoft Defender for Endpoint

4. Perform device investigations in Microsoft Defender for Endpoint Mitigate threats using Microsoft

5. Perform actions on a device using Microsoft Defender for Endpoint

6. Perform evidence and entities investigations using Microsoft Defender for Endpoint

7. Configure and manage automation using Microsoft Defender for Endpoint

8. Configure for alerts and detections in Microsoft Defender for Endpoint

9. Utilize Vulnerability Management in Microsoft Defender for Endpoint

Lesson 4 - Mitigate threats using Microsoft Defender for Cloud

1. Plan for cloud workload protections using Microsoft Defender for Cloud

2. Connect Azure assets to Microsoft Defender for Cloud

3. Connect non-Azure resources to Microsoft Defender for Cloud

4. Manage your cloud security posture management

5. Explain cloud workload protections in Microsoft Defender for Cloud

6. Remediate security alerts using Microsoft Defender for Cloud Mitigate threats using Microsoft Defender for Cloud

Lesson 5 - Create queries for Microsoft Sentinel using Kusto Query Language (KQL)

1. Construct KQL statements for Microsoft Sentinel

2. Analyze query results using KQL

3. Build multi-table statements using KQL

4. Work with data in Microsoft Sentinel using Kusto Query Language

Lesson 6 - Configure your Microsoft Sentinel environment

1. Introduction to Microsoft Sentinel

2. Create and manage Microsoft Sentinel workspaces

3. Query logs in Microsoft Sentinel

4. Use watchlists in Microsoft Sentinel

Lesson 7 - Connect logs to Microsoft Sentinel

1. Connect data to Microsoft Sentinel using data connectors

2. Connect Microsoft services to Microsoft Sentinel

3. Connect Microsoft Defender XDR to Microsoft Sentinel

4. Connect Windows hosts to Microsoft Sentinel

5. Connect Common Event Format logs to Microsoft Sentinel

6. Connect syslog data sources to Microsoft Sentinel

7. Connect threat indicators to Microsoft Sentinel Connect logs to Microsoft Sentinel

Lesson 8 - Create detections and perform investigations using Microsoft Sentinel

1. Threat detection with Microsoft Sentinel analytics

2. Automation in Microsoft Sentinel

3. Threat response with Microsoft Sentinel playbooks

4. Security incident management in Microsoft Sentinel

5. Identify threats with Entity behavioral analytics in Microsoft Sentinel

6. Data normalization in Microsoft Sentinel Create detections and perform investigations using Microsoft

Lesson 9 - Perform threat hunting in Microsoft Sentinel

1. Threat hunting with Microsoft Sentinel

Talk To Us

We are happy to help you

1-800-7430-173 (US Toll Free)

+91 7240740740 (India)

Drop Us a Query

Fields marked * are mandatory

Name

Phone Number

Comments

Request For Live Demo Class

Course Fees

Online Class Room Program

US $ 799.00

100% Money Back Guarantee

Duration : 32 Hrs
Plus Self Paced

Classes Starting From

Fast Track Batch 07 Jul 2026
Weekday Batch 13 Jul 2026
Weekend Batch 11 Jul 2026

Corporate Training

Customized Training Delivery Model
Flexible Training Schedule Options
Industry Experienced Trainers
24x7 Support

Trusted By Top Companies Worldwide

Want to know Today's Offer

Microsoft Security Operations Analyst Training Exam

Exam name

Microsoft Certified - Security Operations Analyst Associate

Exam Format

Exam code: SC-200
Duration:120 minutes
Number of Questions: 40-60
Passing Score: 70%
Exam Format: Multiple-choice and multiple-response questions
Exam Languages: English, Japanese, Korean, Simplified Chinese (and more depending on region)
Exam Cost: $165 USD

Microsoft Security Operations Analyst Training Exam

Reviews

Login

Email ID*

Password*

Forgot Password?

SC-200 Microsoft Security Operations Analyst Training