M55610A - Planning and implementing Microsoft Sentinel (SIEM & SOAR) Course Overview

Target Audience for M55610A - Planning and implementing Microsoft Sentinel (SIEM & SOAR)

Introduction:
This course, M55610A - Planning and Implementing Microsoft Sentinel (SIEM & SOAR), is designed for IT professionals and Azure administrators seeking to master Microsoft's Sentinel for enhanced security operations.

Job Roles and Audience:

• Azure Administrators
• IT Security Managers
• Security Operations Center (SOC) Analysts
• Network Administrators
• Cybersecurity Specialists
• IT Consultants
• Security Engineers
• Systems Integrators
• Cloud Solution Architects
• DevOps Engineers
• IT Auditors
• Incident Responders
• Managed Security Services Providers (MSSPs)

Learning Objectives - What you will Learn in this M55610A - Planning and implementing Microsoft Sentinel (SIEM & SOAR)?

Introduction:

The M55610A – Planning and Implementing Microsoft Sentinel (SIEM & SOAR) course equips IT professionals and Azure administrators with the expertise needed to configure, manage, and utilize Microsoft Sentinel for advanced threat detection, response, and overall security information and event management (SIEM) and security orchestration, automation, and response (SOAR).

Learning Objectives and Outcomes:

• Gain a comprehensive overview of Microsoft Sentinel and its core functionalities.
• Understand data ingestion methods and effectively utilize data connectors for diverse data sources.
• Master the basics and advanced features of Kusto Query Language (KQL) for querying and managing data within Microsoft Sentinel.
• Implement and manage analytics rules to detect and respond to threats.
• Explore and apply incident management techniques, including the use of automation and playbooks for threat response.
• Develop threat hunting skills using Microsoft Sentinel, leveraging search jobs and notebooks.
• Utilize watchlists to prioritize incidents, reduce alert fatigue, and enrich event data.
• Incorporate Threat Intelligence to enhance detection and response capabilities within Microsoft Sentinel.
• Understand the role of User and Entity Behavior Analytics (UEBA) in identifying anomalous activities.
• Manage logs and monitor costs effectively within Microsoft Sentinel.

By the end of this course, participants will be proficient in setting