Microsoft Security Operations Analyst SC-200The Complete Beginner's Guide

Microsoft Defender for Endpoint

Objective 1.1 · Defender XDR

Microsoft Defender for Identity

Objective 1.2 · Defender XDR

Microsoft Defender for Office 365

Objective 1.3 · Defender XDR

Microsoft Defender for Cloud Apps

Objective 1.4 · Defender XDR

Defender for Endpoint Alert Triage

Objective 1.1

Advanced Hunting with KQL in Defender

Objective 1.1

Defender for Endpoint Live Response

Objective 1.1

Defender for Identity Attack Detections

Objective 1.2

Defender XDR Incident Correlation

Objective 1.1

Defender for Endpoint ASR Rules

Objective 1.1

Defender for Endpoint Network Protection

Objective 1.1

Defender for Endpoint Device Inventory

Objective 1.1

Defender for Endpoint Onboarding Methods

Objective 1.1

Automated Investigation and Response (AIR) in MDE

Objective 1.1

Defender for Identity Alert Categories

Objective 1.2

Domain Controller and Active Directory Monitoring

Objective 1.2

Defender for Office 365 Policy Configuration

Objective 1.3

Safe Attachments and ZAP in Defender

Objective 1.3

Defender for Cloud Apps Policies

Objective 1.4

Shadow IT Discovery with MCAS

Objective 1.4

Conditional Access App Control in MCAS

Objective 1.4

SOC Incident Triage and Escalation

Objective 1.1

Live Response and Remote Forensics

Objective 1.1

Custom Detection Rules in Defender XDR

Objective 1.1

Entra ID Risk Policies and Sign-In Risk

Objective 1.4

Device Timeline Analysis in MDE

Objective 1.1

User Risk Investigation in Entra ID Protection

Objective 1.4

Microsoft Copilot for Security

Objective 1.1

Defender for Endpoint Security Baselines

Objective 1.1

Defender for Endpoint Web Content Filtering

Objective 1.1

Defender XDR Security Graph and Investigations

Objective 1.1

Microsoft Copilot for Security

Objective 1.1

Defender XDR Automatic Attack Disruption

Objective 1.1

Microsoft Sentinel Workspace Setup

Objective 2.1 · Sentinel

KQL for Security Analysts

Objective 2.2 · Sentinel

Sentinel Analytics Rules

Objective 2.3 · Sentinel

Sentinel Incident Management

Objective 2.4 · Sentinel

Sentinel Playbooks and Automation

Objective 2.5 · Sentinel

Threat Hunting in Sentinel

Objective 2.6 · Sentinel

User and Entity Behaviour Analytics in Sentinel

Objective 2.2

Microsoft Sentinel Workbooks

Objective 2.1

Sentinel Watchlists

Objective 2.2

Automation Rules vs Playbooks in Sentinel

Objective 2.5

Threat Intelligence in Microsoft Sentinel

Objective 2.2

Fusion ML Detection Rules in Sentinel

Objective 2.3

Sentinel Data Connectors

Objective 2.1

Advanced KQL: Joins, Summarize, and Aggregations

Objective 2.2

KQL Time Functions and Temporal Analysis

Objective 2.2

Sentinel Entity Mapping and Investigation Graph

Objective 2.4

Sentinel Notebooks with Jupyter

Objective 2.2

Threat Intelligence Indicators in Sentinel

Objective 2.2

Mapping Sentinel Rules to MITRE ATT&CK

Objective 2.3

Scheduled Analytics Rules vs NRT Rules

Objective 2.3

Multi-Workspace Sentinel Architecture

Objective 2.1

Sentinel Workspace Design Considerations

Objective 2.1

Sentinel Health and Auditing

Objective 2.1

M365 Defender Data Connectors

Objective 2.1

Azure Activity and Entra ID Connectors

Objective 2.1

CEF and Syslog Connector Configuration

Objective 2.1

Logic Apps Playbooks for Sentinel Automation

Objective 2.5

Alert Enrichment with Automation Rules

Objective 2.5

Sentinel Cost Management and Data Retention

Objective 2.1

Custom Sentinel Data Connectors

Objective 2.1

Sentinel and Defender XDR Bi-Directional Sync

Objective 2.1

Threat Hunting Query Library

Objective 2.6

SOAR Workflows with Sentinel

Objective 2.5

Sentinel Data Export and Archiving

Objective 2.1

Sentinel Basic Logs vs Analytics Logs

Objective 2.1

Sentinel Summary Rules for Large Data

Objective 2.2

AI and ML Threat Detection in Microsoft Security

Objective 2.3

Sentinel Customer-Managed Keys (CMK)

Objective 2.1

Sentinel Private Link and Data Privacy

Objective 2.1

Sentinel Near-Real-Time (NRT) Analytics Rules

Objective 2.3

Sentinel Entity Behaviour Scoring

Objective 2.2

Sentinel Fusion ML Detection Scenarios

Objective 2.3

Sentinel Data Tiering: Hot, Cold, Archive

Objective 2.1

Sentinel Content Hub and Solutions

Objective 2.1

Microsoft Defender for Cloud

Objective 3.1 · Cloud Security

Cloud Security Posture Management

Objective 3.2 · Cloud Security

Microsoft Defender for Storage

Objective 3.1

Microsoft Defender for Key Vault

Objective 3.1

Microsoft Secure Score Improvements

Objective 3.2

Defender CSPM and Attack Paths

Objective 3.2

Regulatory Compliance Assessment

Objective 3.2

Defender for Cloud Plans and Coverage

Objective 3.1

Defender for Cloud Agents and Extensions

Objective 3.1

Defender for Cloud Multi-Cloud (AWS, GCP)

Objective 3.1

Defender for Servers Plans

Objective 3.1

Just-In-Time VM Access

Objective 3.1

File Integrity Monitoring in Defender

Objective 3.1

Adaptive Network Hardening

Objective 3.1

Secure Score: Controls and Recommendations

Objective 3.2

Security Policy Initiatives

Objective 3.2

Governance Rules and Risk Owners

Objective 3.2

Container Security and Kubernetes Threat Detection

Objective 3.2

Defender for APIs Threat Detection

Objective 3.1

NIST Cybersecurity Framework for SC-200

Objective 3.2

Zero Trust Implementation with Microsoft Security

Objective 3.2

Defender CSPM Attack Path Simulation

Objective 3.2

Azure Arc-Connected Machines in Defender

Objective 3.1

Cloud Security Architecture Review

Objective 3.2