SC-200 Microsoft Security Operations Analyst

Price
Net: €
VAT: €

Price
Price on Request

Duration
4 days

For companies and job seekers:
this course is 100% fundable!

Location

Course Language
German

Training Solutions
Connected Classroom

Request a consultation Add to favorites Print as PDF

Professional IT security requires more than just individual tools. It calls for well-thought-out processes, continuous monitoring, and precise analysis of security events. Microsoft-based security operations combine these requirements in integrated platforms.

Key topics

Central evaluation of security-related data.
Handling alerts and incidents.
Threat intelligence and attack detection.
Use of Microsoft Sentinel.
Automation of response steps.
Operation of secure cloud and hybrid environments.

Prerequisites
Knowledge of IT systems, cloud services, and basic security principles is required.

Target audience
IT security professionals, administrators, SOC employees, and technically oriented roles with security responsibilities.

Structured security operations increase transparency and response speed. The content supports sustainable security operations that withstand current threats and reliably secure modern IT architectures.

Print as PDF

Course content

Defend against threats

Threat protection in Microsoft 365
Incident response with Microsoft 365 Defender
Identity protection with Azure AD Identity Protection
Risk mitigation with Microsoft Defender for Office 365
Protect your environment with Microsoft Defender for Identity
Securing cloud applications with Microsoft Defender for Cloud Apps
Responding to data loss alerts in Microsoft 365
Manage insider risks in Microsoft 365

Protection for end devices

Protect with Microsoft Defender for Endpoint
Deploying the Defender environment
Implementing Windows security enhancements
Performing device investigations
Performing actions on devices
Investigating evidence and entities
Configuring and managing automation
Setting up alerts and detections
Using vulnerability management

Security risks

Plan protection for cloud workloads with Microsoft Defender for Cloud
Connect Azure resources to Microsoft Defender for Cloud
Connect non-Azure resources to Microsoft Defender for Cloud
Manage cloud security posture management
Explain cloud workload protection in Microsoft Defender for Cloud
Resolve security alerts in Microsoft Defender for Cloud

Data in Microsoft Sentinel

Create KQL statements for Microsoft Sentinel
Analyze query results with KQL
Create multi-table queries with KQL
Edit data in Microsoft Sentinel with KQL

Set up Microsoft Sentinel

Microsoft Sentinel Overview
Microsoft Sentinel workspaces
Querying logs in Microsoft Sentinel
Using watchlists in Microsoft Sentinel
Threat data in Microsoft Sentinel

Logs with Microsoft Sentinel

Connect data to Microsoft Sentinel using connectors
Integrate Microsoft services into Microsoft Sentinel
Connect Microsoft 365 Defender to Microsoft Sentinel
Integrate Windows hosts into Microsoft Sentinel
Connect Common Event Format logs to Microsoft Sentinel
Integrate syslog data sources into Microsoft Sentinel
Connect threat indicators to Microsoft Sentinel

Investigations with Microsoft Sentinel

Detect threats with Microsoft Sentinel analytics
Automation with Microsoft Sentinel
Respond to threats with Sentinel playbooks
Manage security incidents in Microsoft Sentinel
Detect threats with entity behavior analytics
Normalize data in Microsoft Sentinel
Query, visualize, and monitor data in Microsoft Sentinel
Managing content in Microsoft Sentinel

Threats in Microsoft Sentinel

Threat hunting concepts in Microsoft Sentinel
Threat hunting in Microsoft Sentinel
Using search jobs in Microsoft Sentinel
Threat hunting with notebooks in Microsoft Sentinel

Your training will be 100% funded

Our funding schemes are available exclusively to participants who live or work in Germany. Funding is not available outside Germany.

For career starters, job seekers, career changers, startups, experienced professionals, those looking to advance their careers, specialists, etc.

The QCG program for everyone in the company

Further information

The education voucher for all job seekers

Further information

Frequently Asked Questions

How do companies respond to modern cyberattacks?

Cyberattacks are constantly evolving and require ongoing monitoring of the IT environment. This training course demonstrates how to detect, analyze, and effectively address security incidents.

What are the responsibilities of a Security Operations Analyst?

The focus is on monitoring security events, analyzing threats, evaluating alerts, and responding to security incidents.

Which Microsoft security solutions are used?

Topics covered include Microsoft Sentinel, Microsoft Defender XDR, and other Microsoft security services for detecting, investigating, and defending against attacks.

Why is a Security Operations Center (SOC) important?

A SOC monitors IT systems around the clock and assesses security-related events. The content explains how structured processes enable a rapid response to threats.

How can security incidents be investigated more quickly?

By analyzing logs, alerts, and attack vectors, patterns can be identified and appropriate countermeasures can be implemented.

What role does threat intelligence play?

Up-to-date information on attack methods and threat actors helps organizations better assess risks and tailor their security measures accordingly.

For which fields of application is this continuing education program suitable?

It is suitable for security operations centers, incident response, threat detection, and the continuous monitoring of modern Microsoft cloud and hybrid environments.

What skills are developed?

This training course provides hands-on knowledge on how to detect, analyze, and respond to security incidents using Microsoft Sentinel, Microsoft Defender XDR, and other security solutions.

Do you have any further questions? Please contact us.

Select your nearest center: *

0800 258 258 055

website@newhorizons.de

First Name *

Surname *

Telephone Number *

Postcode *

E-Mail *

I would like to receive funding for further training – I am currently: *

Company Name

Your message

I hereby confirm that I have taken note of the privacy notice. *