|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/microsoft-sc-200-security-operations-analyst-microsoft-sc-900/
课程评论：没有评论
课程名称：微软 SC-200 安全运营分析师硕士课程 课程概述：该硕士课程专注于 Microsoft SC-200: 安全运营分析师，旨在帮助学员了解如何在组织中确保信息技术系统的安全性。安全运营分析师需要与组织利益相关者合作，通过快速解决主动攻击、改善威胁保护实践以及向适当人员报告违反组织政策的事件，来降低组织风险。课程涵盖的内容包括使用 Microsoft Sentinel、Microsoft Defender for Cloud、Microsoft 365 Defender 及第三方安全产品来管理、监控和响应威胁。学员将学习安全运营分析师的概念与流程，监控和响应安全事件的技巧，实施和管理检测解决方案，以及管理和调查安全警报。此外，课程还涉及实施威胁保护、保护身份和访问、管理云安全态势、数据安全和隐私、治理、风险与合规，以及安全报告和文档的生成。 课程将重点教授以下五个主要主题： 1. 利用 Microsoft 365 Defender 建立安全运营中心。 2. 使用 Microsoft 365 Defender 管理警报、事件，并调查安全事件。 3. 利用 Azure AD 身份保护分析威胁分析，检测风险。 4. 使用条件访问应用程序控制检测威胁。 5. 调查 Microsoft Defender for Cloud Apps 中的数据丢失防护警报。 如果学员熟悉攻击向量、网络威胁、事件管理和 Kusto 查询语言（KQL），将有助于课程的学习。此外，了解 Microsoft 365 和 Azure 也是加分项。此课程旨在为希望在安全运营领域发展的专业人士提供系统而全面的技能培训。
Master course in Microsoft SC-200: Microsoft Security Operations Analyst: In addition to collaborating with organizational stakeholders, the Microsoft security operations analyst ensures the security of information technology systems for the organization. They're working on reducing organizational risk by quickly resolving active attacks, improving threat protection practices, and referring violations of organizational policies to the right people. Providing secure IT systems is the responsibility of the Microsoft Security Operations Analyst. To accomplish this goal, they have to work with stakeholders in the organization. By identifying active attacks in the environment and amending them promptly, they decrease the risk of violations of organizational policies. You can get advice on how to improve threat protection.Manage, monitor, and respond to threats across their environment using a variety of security solutions. Utilizing Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft 365 Defender, and third-party security products, the role investigates, responds to, and hunts for threats. These tools are also configured and deployed by the security operations analyst, because they consume operational output. You can learn the concepts and process of Security Operations Analyst, SC-200, Azure Sentinel, Microsoft sentinel, Microsoft Defender for Cloud Apps and Microsoft 365 Defender.Monitoring and Responding to Security Incidents: Understanding how to detect, investigate, and respond to security incidents within a Microsoft cloud environment. This involves using various tools and technologies to identify potential threats and take appropriate action.Implementing and Managing Detection Solutions: Learning about different security detection solutions available in Microsoft's ecosystem and how to implement and manage them effectively. This may include technologies such as Azure Sentinel, Microsoft Defender for Endpoint, etc.Managing and Investigating Security Alerts: Gaining knowledge on handling security alerts generated by various security solutions and conducting thorough investigations to determine the scope and impact of potential incidents.Implementing Threat Protection: Learning to implement and manage threat protection measures to safeguard the cloud environment from various cyber threats, such as malware, phishing attacks, etc.Securing Identities and Access: Understanding how to protect identities, manage access controls, and implement multi-factor authentication to prevent unauthorized access.Managing Cloud Security Posture: Learning about best practices for maintaining a secure cloud environment, including configuring security policies, network security, and access controls.Data Security and Privacy: Understanding data protection mechanisms and privacy regulations relevant to the Microsoft cloud environment.Governance, Risk, and Compliance: Gaining knowledge of governance frameworks, risk assessment methodologies, and compliance standards in the context of cloud security operations.Security Reports and Documentation: Learning to generate security reports and maintain documentation of security operations activities.This role needs candidates who are familiar with attack vectors, cyberthreats, incident management, and Kusto Query Language (KQL). It's also a plus if candidates know Microsoft 365 and Azure.In this master course, I would like to teach the 5 Major topics,1. Security Operations Center with Microsoft 365 Defender2. Manage alerts, incidents, and investigate security incidents with Microsoft 365 Defender3. Analyze threat analytics and detect risks with Azure AD Identity Protection4. How to detect threats with Conditional Access App Control5. Data loss prevention alerts, Microsoft Defender for Cloud Apps: Investigate data loss prevention alerts
