Microsoft Azure Sentinel Training Online

Prerequisites

• Basic understanding of Microsoft Azure

• Familiarity with security concepts (e.g., SIEM, identity, access control)

• Knowledge of networking fundamentals

• Experience with Microsoft 365 security tools

What You Will Learn

• Configure Microsoft Sentinel workspaces, roles, and data retention policies
• Connect data sources using Windows Events, Syslog, CEF, and Azure Activity connectors
• Create scheduled, NRT, Threat Intelligence, and Machine Learning analytics rules
• Map attack coverage using the MITRE ATT&CK framework
• Write and optimize KQL queries for threat detection and hunting
• Create KQL jobs in Data Lake and Summary rule tables for faster querying
• Hunt threats using Notebooks connected to the Sentinel MCP Server
• Investigate incidents across Sentinel, Defender XDR, and Defender for Cloud
• Handle multi-stage, multi-domain, and lateral movement attacks
• Use Copilot for Security and agentic AI to accelerate investigations
• Analyze entity relationships using Sentinel Graph and blast radius analysis
• Automate responses using automation rules and playbooks
• Build workbooks and dashboards to visualize security posture
• Manage the full incident lifecycle using case management
• Prepare for the SC-200 exam

Who Should Enroll

• Security Analysts

• SOC Team Members

• Cybersecurity Professionals

• Azure Administrators

• Cloud Security Engineers

• IT Security Managers

• Incident Response Specialists

• Threat Monitoring Professionals