EDR (End Point Detection & Response Training )

Mitigate threats using Microsoft Defender for Endpoint

Implement the Microsoft Defender for Endpoint platform to detect, investigate, and respond to advanced threats. Learn how Microsoft Defender for Endpoint can help your organization stay secure. Learn how to deploy the Microsoft Defender for Endpoint environment, including onboarding devices and configuring security. Learn how to investigate incidents and alerts using Microsoft Defender for Endpoints. Perform advanced hunting and consult with threat experts. You will also learn how to configure automation in Microsoft Defender for Endpoint by managing environmental settings.. Lastly, you will learn about your environment’s weaknesses by using Threat and Vulnerability Management in Microsoft Defender for Endpoint.

Lessons:

Protect against threats with Microsoft Defender for Endpoint

Deploy the Microsoft Defender for Endpoint environment

Implement Windows 10 security enhancements with Microsoft Defender for Endpoint

Manage alerts and incidents in Microsoft Defender for Endpoint

Perform device investigations in Microsoft Defender for Endpoint

Perform actions on a device using Microsoft Defender for Endpoint

Perform evidence and entities investigations using Microsoft Defender for Endpoint

Configure and manage automation using Microsoft Defender for Endpoint

Configure for alerts and detections in Microsoft Defender for Endpoint

Utilize Threat and Vulnerability Management in Microsoft Defender for Endpoint

Lab : Mitigate threats using Microsoft Defender for Endpoint

Deploy Microsoft Defender for Endpoint

Mitigate Attacks using Defender for Endpoint

After completing this module, students will be able to:

Define the capabilities of Microsoft Defender for Endpoint

Configure Microsoft Defender for Endpoint environment settings

Configure Attack Surface Reduction rules on Windows 10 devices

Investigate alerts in Microsoft Defender for Endpoint

Describe device forensics information collected by Microsoft Defender for Endpoint

Conduct forensics data collection using Microsoft Defender for Endpoint

Investigate user accounts in Microsoft Defender for Endpoint

Manage automation settings in Microsoft Defender for Endpoint

Manage indicators in Microsoft Defender for Endpoint

Describe Threat and Vulnerability Management in Microsoft Defender for Endpoint

Mitigate threats using Microsoft 365 Defender

Analyze threat data across domains and rapidly remediate threats with built-in orchestration and automation in Microsoft 365 Defender. Learn about cybersecurity threats and how the new threat protection tools from Microsoft protect your organization’s users, devices, and data. Use the advanced detection and remediation of identity-based threats to protect your Azure Active Directory identities and applications from compromise.

Lessons

Introduction to threat protection with Microsoft 365

Mitigate incidents using Microsoft 365 Defender
Protect your identities with Azure AD Identity Protection
Remediate risks with Microsoft Defender for Office 365
Safeguard your environment with Microsoft Defender for Identity
Secure your cloud apps and services with Microsoft Cloud App Security
Respond to data loss prevention alerts using Microsoft 365
Manage insider risk in Microsoft 365

Lab : Mitigate threats using Microsoft 365 Defender

Mitigate Attacks with Microsoft 365 Defender
After completing this module, students will be able to:
Explain how the threat landscape is evolving.
Manage incidents in Microsoft 365 Defender
Conduct advanced hunting in Microsoft 365 Defender
Describe the investigation and remediation features of Azure Active Directory Identity
Protection.
Define the capabilities of Microsoft Defender for Endpoint.
Explain how Microsoft Defender for Endpoint can remediate risks in your environment.
Define the Cloud App Security framework
Explain how Cloud Discovery helps you see what’s going on in your organization