Module 1 Introduction to Microsoft 365 Threat Protection
Module 2 : Mitigate Incidents using Microsoft 365 Defender
Module 3 : Protect your Identities with Azure AD Identity Protection
Module 4 : Remediate Risks with Microsoft Defender for Office 365
Module 5 : Safeguard your Environment with Microsoft Defender for Identity
Module 6 : Secure your Cloud Apps and Services with Microsoft Defender for Cloud Apps
Module 7 : Respond to Data Loss Prevention Alerts using Microsoft 365
Module 8 : Manage Insider Risk in Microsoft Purview
Module 9 : Investigate Threats by Using Audit Features in Microsoft 365 Defender and Microsoft
Purview Standard
Module 10 : Investigate Threats using Audit in Microsoft 365 Defender and Microsoft Purview
(Premium)
Module 11 : Investigate Threats with Content Search in Microsoft Purview
Module 12 : Protect Against Threats with Microsoft Defender for Endpoint
Module 13 : Deploy the Microsoft Defender for Endpoint Environment
Module 14 : Implement Windows Security Enhancements with Microsoft Defender for Endpoint
Module 15 : Perform Device Investigations in Microsoft Defender for Endpoint
Module 16 : Perform Actions on a Device Using Microsoft Defender for Endpoint
Module 17 : Perform Evidence and Entities Investigations using Microsoft Defender for
Endpoint
Module 18 : Configure and Manage Automation using Microsoft Defender for Endpoint
Module 19 : Configure for Alerts and Detections in Microsoft Defender for Endpoint
Module 20 : Utilize Vulnerability Management in Microsoft Defender for Endpoint
Module 21 : Plan for Cloud Workload Protections using Microsoft Defender for Cloud
Module 22 : Connect Azure Assets to Microsoft Defender for Cloud
Module 23 : Connect Non-Azure Resources to Microsoft Defender for Cloud
Module 24 : Manage your Cloud Security Posture Management
Module 25 : Explain Cloud Workload Protections in Microsoft Defender for Cloud
Module 26 : Remediate Security Alerts using Microsoft Defender for Cloud
Module 27 : Construct KQL Statements for Microsoft Sentinel
Module 28 : Analyze Query Results using KQL
Module 29 : Build Multi-table Statements using KQL
Module 30 : Work with Data in Microsoft Sentinel using Kusto Query Language
Module 31 : Introduction to Microsoft Sentinel
Module 32 : Create and Manage Microsoft Sentinel Workspaces
Module 33 : Query Logs in Microsoft Sentinel
Module 34 : Use Watchlists in Microsoft Sentinel
Module 35 : Utilize Threat Intelligence in Microsoft Sentinel
Module 36 : Connect Data to Microsoft Sentinel using Data Connectors
Module 37 : Connect Microsoft Services to Microsoft Sentinel
Module 38 : Connect Microsoft 365 Defender to Microsoft Sentinel
Module 39 : Connect Windows Hosts to Microsoft Sentinel
Module 40 : Connect Common Event Format Logs to Microsoft Sentinel
Module 41 : Connect Syslog Data Sources to Microsoft Sentinel
Module 42 : Connect Threat Indicators to Microsoft Sentinel
Module 43 : Threat Detection with Microsoft Sentinel Analytics
Module 44 : Automation in Microsoft Sentinel
Module 45 : Security Incident Management in Microsoft Sentinel
Module 46 : Identify Threats with Behavioral Analytics
Module 47 : Data Normalization in Microsoft Sentinel
Module 48 : Query, Visualize, and Monitor Data in Microsoft Sentinel
Module 49 : Manage Content in Microsoft Sentinel
Module 50 : Explain Threat Hunting Concepts in Microsoft Sentinel