As a learner enrolled, you’re a security operations analyst who reduces organizational risk by performing triage, responding to incidents, hunting for threats, and engineering detections. As a security operations analyst, you monitor, identify, investigate, and respond to threats in multi-cloud and on-premises environments by using Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, Microsoft Purview, and Microsoft Defender for Cloud workload protections. You perform hunting by using KQL and automate responses to threats.
Duration - 10 Hours
Level - Intermediate
Style - Self paced
Course Type - Credential Ready
Certification - Yes
Hands on Labs - Yes
Solution Areas - Security, Establish a trusted and secure platform for AI (Frontier), AI ready productivity & security for every employee (Core), Modernize with confidence (Core), Create a competitive edge with AI (Frontier), Run your business securely (Core), Modernize your data to drive results and leverage AI (Core)
Featured Product - Microsoft Security Copilot
In this introductory module, we will walk you through the key information you need to know before starting your certification prep course. You'll gain a clear understanding of the steps, expectations, and benefits
This module contains recordings of the Live Cert Week sessions. Recordings are added here on a day-wise basis so you can revisit key concepts and discussions at your own pace.
In this module, learners will learn to investigate and respond to security incidents by using Microsoft Defender XDR and Microsoft Defender solutions, including Microsoft Defender for Office 365, Microsoft Entra ID Identity Protection, Microsoft Defender for Identity, and Microsoft Defender for Cloud Apps through lectures
In this module, learners will learn to deploy and configure Microsoft Sentinel, connect data sources, configure analytics rules, and automate security operations by using Microsoft Sentinel SIEM and SOAR capabilities.
In this module, learners will learn to investigate security incidents, perform threat hunting by using KQL and Microsoft Defender XDR, manage Microsoft Sentinel incidents, and use Microsoft Security Copilot for investigation and response.
In this module, learners will learn to investigate and remediate threats across Microsoft Defender for Endpoint, Defender for Office 365, Defender for Cloud, Defender for Cloud Apps, Microsoft Entra ID, Microsoft Defender for Identity, and Microsoft Purview.
In this exam preparation module, learn effective preparation strategies for the certification exam, including sample questions and study tips.
This Practice Lab module gives you hands-on lab exercises to reinforce your learning. Please note that lab seats are limited and assigned on a first-come, first-served basis, so access may not be available to all learners enrolled in this course.
Take this assessment to validate your skills gathered from the self-paced online learning course completed in this course to mark your completion.
If you have further questions or need support, don’t forget to join our scheduled Office Hours for expert guidance.
49 Hours • Complete Learning Journey(2).PNG?lmsauth=6f17c64bf9caa591e4f062cb9d4a91c9524cf62a)
Intermediate
.PNG?lmsauth=596d35934dd1739a4fc68c1a12346b2fdf03aeb4)
Intermediate
.PNG?lmsauth=38337ce369cca12a0e36c6fc5654c87fd9327d33)
Advanced
.PNG?lmsauth=e0e84331e9e81f6dda1426501e543d2de8d5679e)
Intermediate
Last Updated 15 Sep 2026