The Microsoft Azure Sentinel Training Online is designed to provide comprehensive, in-depth training in Microsoft Azure Sentinel Training. Prerequisites Basic understanding of Microsoft Azure Familiarity with security concepts (e.g., SIEM, identity, access control) Knowledge of networking fundamentals Experience with Microsoft 365 security tools What You Will Learn Configure Microsoft Sentinel workspaces, roles, and data retention policies Connect data sources using Windows Events, Syslog, CEF, and Azure Activity connectors Create scheduled, NRT, Threat Intelligence, and Machine Learning analytics rules Map attack coverage using the MITRE ATT&CK framework Write and optimize KQL queries for threat detection and hunting Create KQL jobs in Data Lake and Summary rule tables for faster querying Hunt threats using Notebooks connected to the Sentinel MCP Server Investigate incidents across Sentinel, Defender XDR, and Defender for Cloud Handle multi-stage, multi-domain, and lateral movement attacks Use Copilot for Security and agentic AI to accelerate investigations Analyze entity relationships using Sentinel Graph and blast radius analysis Automate responses using automation rules and playbooks Build workbooks and dashboards to visualize security posture Manage the full incident lifecycle using case management Prepare for the SC-200 exam Who Should Enroll Security Analysts SOC Team Members Cybersecurity Professionals Azure Administrators Cloud Security Engineers IT Security Managers Incident Response Specialists Threat Monitoring Professionals Post-Training Support Resume building assistance Interview preparation Certification exam guidance Career guidance Trainer support for doubt resolution The program covers foundational concepts through to advanced techniques to ensure you gain job-ready expertise.
