Category: Study guide

Section 11 – Mitigate threats using Microsoft Sentinel – Manage Microsoft Sentinel analytics rules

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 21/05/2023 0 Comments on Section 11 – Mitigate threats using Microsoft Sentinel – Manage Microsoft Sentinel analytics rules
Posted in Azure, Microsoft Sentinel, SC-200, Security, Study guide

11th section starting with more and more Sentinel. Already in this series we saw that how the different pieces are connected and helping you SOC teams to proactively work on threats. So let’s do some designs and configurations. Design and…

Continue Reading Section 11 – Mitigate threats using Microsoft Sentinel – Manage Microsoft Sentinel analytics rules

Section 10 – Mitigate threats using Microsoft Sentinel – Plan and implement the use of data connectors for ingestion of data sources

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 07/05/2023 0 Comments on Section 10 – Mitigate threats using Microsoft Sentinel – Plan and implement the use of data connectors for ingestion of data sources
Posted in Azure, Azure ARC, Azure Policy, Defender, Identity, Microsoft Sentinel, SC-200, Security, Study guide

And in this 10th section on my SC-200 study guide we will go through the following topics. Identify data sources to be ingested for Microsoft Sentinel On August 31, 2024, the Log Analytics agent is deprecated. You should begin preparing…

Continue Reading Section 10 – Mitigate threats using Microsoft Sentinel – Plan and implement the use of data connectors for ingestion of data sources

Section 9 – Mitigate threats using Microsoft Sentinel – Design and configure a Microsoft Sentinel workspace

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 30/04/2023 0 Comments on Section 9 – Mitigate threats using Microsoft Sentinel – Design and configure a Microsoft Sentinel workspace
Posted in Azure, Defender, SC-200, Security, Study guide

We are already at the 9th section on my study guide and this time we will start with Sentinel. First I want to point the Ninja training that Ofer Shezaf’s and him team has made for you. It was updated…

Continue Reading Section 9 – Mitigate threats using Microsoft Sentinel – Design and configure a Microsoft Sentinel workspace

Section 8.2 – Mitigate threats using Microsoft Defender for Cloud – Configure and respond to alerts and incidents in Microsoft Defender for Cloud

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 23/04/2023 0 Comments on Section 8.2 – Mitigate threats using Microsoft Defender for Cloud – Configure and respond to alerts and incidents in Microsoft Defender for Cloud
Posted in Azure, Defender, Identity, SC-200, Security, Study guide

And this is the second part of 8th section on my study guide and today we are looking at recommendations and the alerts and incidents it will create. Again by apologies to all that had to wait as I cut…

Continue Reading Section 8.2 – Mitigate threats using Microsoft Defender for Cloud – Configure and respond to alerts and incidents in Microsoft Defender for Cloud

Section 8.1 – Mitigate threats using Microsoft Defender for Cloud – Configure and respond to alerts and incidents in Microsoft Defender for Cloud

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 16/04/2023 0 Comments on Section 8.1 – Mitigate threats using Microsoft Defender for Cloud – Configure and respond to alerts and incidents in Microsoft Defender for Cloud
Posted in Azure, Defender, SC-200, Security, Study guide

Already in the 8th section on my study guide and today we are looking alerts, automation workflows and remediations. And because this is an huge section to cover, I will cut it in two different posts, my apologies for the…

Continue Reading Section 8.1 – Mitigate threats using Microsoft Defender for Cloud – Configure and respond to alerts and incidents in Microsoft Defender for Cloud

Section 7 – Mitigate threats using Microsoft Defender for Cloud – Plan and implement the use of data connectors for ingestion of data sources in Microsoft Defender for Cloud

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 09/04/2023 0 Comments on Section 7 – Mitigate threats using Microsoft Defender for Cloud – Plan and implement the use of data connectors for ingestion of data sources in Microsoft Defender for Cloud
Posted in Azure, Azure ARC, Azure Automation, Defender, Identity, Microsoft Graph, On-premises, SC-200, Security, Study guide

Continuing the journey with Defender for cloud. This time we will see Data source, how to onboard Azure resources and Azure ARC integration. With the exponential rise of cloud services, companies now place a high priority on protecting cloud workloads….

Continue Reading Section 7 – Mitigate threats using Microsoft Defender for Cloud – Plan and implement the use of data connectors for ingestion of data sources in Microsoft Defender for Cloud

Microsoft certification changes and study materials

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 06/04/2023 0 Comments on Microsoft certification changes and study materials
Posted in Azure, Certifications, Learn, Mentoring, Study guide

Microsoft rebranded their Learn during last year, now it has a fresh new look. Future-proofing your career Microsoft certifications are crucial component for you personally and for the organizations you present. Many organizations have good compensation for skilling-up and they…

Continue Reading Microsoft certification changes and study materials

Section 5 – Mitigate threats using Microsoft 365 Defender – Manage extended detection and response (XDR) in Microsoft 365 Defender

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 26/03/2023 0 Comments on Section 5 – Mitigate threats using Microsoft 365 Defender – Manage extended detection and response (XDR) in Microsoft 365 Defender
Posted in Azure, Defender, Identity, KQL, SC-200, Security, Study guide

Today we will be discovering XDR with Microsoft 365 Defender. It will be an central hub for many different scenarios. Although you will have interfaces inside Azure portal for Sentinel and Defender for Cloud but you can get those signals…

Continue Reading Section 5 – Mitigate threats using Microsoft 365 Defender – Manage extended detection and response (XDR) in Microsoft 365 Defender

Section 3 – Mitigate endpoint threats by using Microsoft Defender for Endpoint

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 19/02/2023 0 Comments on Section 3 – Mitigate endpoint threats by using Microsoft Defender for Endpoint
Posted in Azure, Defender, Identity, Intune, SC-200, Security, Study guide

Welcome to the third section of my SC-200 study guide. First the ones that I didn’t have time to include in the last section but will cover them in different order as in my opinion it makes more sense: And…

Continue Reading Section 3 – Mitigate endpoint threats by using Microsoft Defender for Endpoint

Section 2 – Mitigate threats using Microsoft 365 Defender – Mitigate threats to the productivity environment by using Microsoft 365 Defender

Harri Jaakkonen
Posted by Harri Jaakkonen Posted on 12/02/2023 0 Comments on Section 2 – Mitigate threats using Microsoft 365 Defender – Mitigate threats to the productivity environment by using Microsoft 365 Defender
Posted in Azure, Data Loss Prevention, Insider risks, Microsoft Purview, SC-200, Study guide

Welcome to the second section of my SC-200 study guide. In this section I will go through the following content: And didn’t have time (space) to include the following: And will be covering them in the next section, not to…

Continue Reading Section 2 – Mitigate threats using Microsoft 365 Defender – Mitigate threats to the productivity environment by using Microsoft 365 Defender