Skip to main content

Someone wanted to learn this too, so Grasp built them a personal learning path.

You can keep exploring this one or create your own

SC-200 Certification

Module 2

Microsoft Sentinel Platform Administration

Module 3

Data Ingestion for Microsoft Sentinel

Module 4

KQL Essentials for Security Analysis

Module 5

Defender XDR and Endpoint Environment Configuration

Module 6

Detection Engineering Across XDR and Sentinel

Module 7

Automated Investigation, Disruption, and Response

Module 8

Unified Incident Triage and Case Management

Module 9

Endpoint and Microsoft 365 Investigations

Module 10

Threat Hunting with XDR, Graph, and the Sentinel Platform

Module 11

Product-Specific Incident Response

Module 12

SC-200 Exam Integration and Readiness