Someone wanted to learn this too, so Grasp built them a personal learning path.
You can keep exploring this one or create your own
SC-200 Certification
Recommended resources
The freely available resources this course will direct you to.
- SC-200: Threat Protection with Microsoft Defender XDRwww.youtube.com
- EDR, MDR & XDR Explainedwww.youtube.com
- What is Microsoft Sentinel SIEM?learn.microsoft.com
- What is Microsoft Defender XDR? - Microsoft Defender XDRlearn.microsoft.com
- Understanding all Microsoft security solutions in 10 mins: Sentinel, Defender, XDR, Purview & More!www.youtube.com
- Incident Response with XDR and Integrated SIEM | Microsoft Learnlearn.microsoft.com
Module 2
Microsoft Sentinel Platform Administration
Module 3
Data Ingestion for Microsoft Sentinel
Module 4
KQL Essentials for Security Analysis
Module 5
Defender XDR and Endpoint Environment Configuration
Module 6
Detection Engineering Across XDR and Sentinel
Module 7
Unified Incident Triage and Case Management
Module 8
Endpoint and Microsoft 365 Investigations
Module 9
Product-Specific Incident Response
Module 10
Automated Investigation, Disruption, and Response
Module 11
Threat Hunting with XDR, Graph, and the Sentinel Platform
Module 12