Master Class: Microsoft Defender and Microsoft Sentinel for Hybrid Cloud (HYBSEC)

 

Course Overview

Today, IT environments (VMs, apps and data platforms) are not only hosted on premises nor only in the cloud. Working with both world is the reality for a variety of reasons. This affects a lot of processes, design decisions but also security monitoring.

Monitoring must be established, and the collected data has to be investigated and evaluated. In this Master Class we dive deep into Microsoft Cloud Security whether on-prem or cloud-based systems. We will focus on Microsoft Defender for Cloud, Defender for Identity and Microsoft Sentinel. These services are able to monitor and secure you hybrid environment.

Who should attend

Administrators with experience of at least 5 years in administering Windows Active Directory Domain Services, Azure Active Directory and Azure resources.

Course Content

Defender for Cloud
  • Overview of Defender for Cloud
  • Prerequisites and implementation
  • Securing Azure workloads
  • Securing on-premises workloads
  • Cloud Security Posture Management overview
  • Use automation to respond to alerts
  • Mastering Azure Policy guest configuration
Defender for Identity
  • Overview of MS Defender for Identity
  • Planning MS Defender for Identity Deployment
    (Architecture, Prerequisites)+
  • Implement Defender for Identity
  • Investigate alerts/detections
    • Reconnaissance Alerts
    • Compromised Credential Alerts
    • Lateral Movement Alerts
    • and some more
KQL Primer
  • Basic operators for querying tables and formatting output
  • Working with variables
  • Advance operators and functions
    • Extending tables
    • Querying and filtering property bags
    • Aggregate records and
    • Create custom functions
  • working with multiple tables and external data
Microsoft Sentinel
  • Data collectors Implementation
  • Creating Analytic rules
  • Use automation to respond to Incidents
  • Automatically enrich incident information
  • Investigate Incidents
  • Perform threat hunting
  • Create workbooks
  • Investigate with UEBA

Prices & Delivery methods

Online training
Modality: L

Duration 5 days

Price
  • on request
Dates and Booking
Enquire a date
Classroom training
Modality: C

Duration 5 days

Price
  • on request
Dates and Booking
Enquire a date

Schedule

English

Time zone: Central European Time (CET)   ±1 hour

Online training Time zone: Central European Time (CET)
Online training Time zone: Central European Summer Time (CEST)
Online training Time zone: Central European Time (CET)
Guaranteed date:   We will carry out all guaranteed training regardless of the number of attendees, exempt from force majeure or other unexpected events, like e.g. accidents or illness of the trainer, which prevent the course from being conducted.
Instructor-led Online Training:   This is an Instructor-Led Online course
This is a FLEX course, which is delivered both virtually and in the classroom.

Europe

Germany

 guaranteed! Hamburg This is a FLEX course.   Time zone: Central European Time (CET) Enroll:
for online training
for classroom training
Frankfurt This is a FLEX course.   Time zone: Central European Summer Time (CEST) Enroll:
for online training
for classroom training
Hamburg This is a FLEX course.   Time zone: Central European Summer Time (CEST) Enroll:
for online training
for classroom training
München This is a FLEX course.   Time zone: Central European Time (CET) Enroll:
for online training
for classroom training
Guaranteed date:   We will carry out all guaranteed training regardless of the number of attendees, exempt from force majeure or other unexpected events, like e.g. accidents or illness of the trainer, which prevent the course from being conducted.
This is a FLEX course, which is delivered both virtually and in the classroom.