MEAPSA

Manage alerts and incidents in Microsoft Defender for Endpoint

Learn how to investigate incidents and alerts using Microsoft Defender for Endpoints. Perform advanced hunting and consult with threat experts.

Security Operations Analyst

Microsoft 365

Module Objectives

Upon completion of this module, the learner will be able to:

Investigate incidents in Microsoft Defender for Endpoint
Investigate alerts in Microsoft Defender for Endpoint
Perform advanced hunting in Microsoft Defender for Endpoint

Units

Introduction min
Explain security operations in Microsoft Defender for Endpoint min
Manage and investigate incidents min
Manage and investigate alerts min
Manage automated investigations min
Use the action center min
Perform advanced hunting min
Consult Microsoft threat experts min
Knowledge check min
Summary and resources min

Prerequisites

Intermediate understanding of Windows 10.