Explore digital courses

Configure Defender for Cloud security standards at management group scope and systematically deploy security controls to remediate recommendations at scale using Fix, governance rules, Policy remediation tasks, and exemptions.

Units in this learning path:

• Introduction
• Configure Defender Cloud Security Standards
• Deploy Remediation Controls Scale
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure Policy, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Compliance

Duration: 21 minutes

Configure Trusted Launch security features for Azure virtual machines. Enable Secure Boot, vTPM, and integrity monitoring to protect against boot-level malware and rootkits. Then upgrade existing VMs to the Trusted Launch security type, and enforce adoption at scale using Azure Policy.

Units in this learning path:

• Introduction
• Identify Trusted Launch Components
• Enable Trusted Launch
• Migrate Gen 1 Configure Components
• Enforce Trusted Launch Azure Policy
• Knowledge Check
• Summary

Products: Azure Virtual Machines, Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 28 minutes

Learn how to plan, create, and configure Security Copilot workspaces for enterprise segmentation. Configure capacity, data residency, roles, plugins, and agent routing for multi-team deployments.

Units in this learning path:

• Introduction
• Plan Workspace Deployment
• Create Workspace
• Configure Workspace Access Settings
• Assign Workspaces Integrated Agents
• Monitor Manage Workspace Capacity
• Knowledge Check
• Summary

Products: Security Copilot

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 45 minutes

Configure your Microsoft Sentinel environment

Modules in this learning path:

• Intro to Azure Sentinel
• Create Manage Azure Sentinel Workspaces
• Query Logs Azure Sentinel
• Use Watchlists Azure Sentinel
• Utilize Threat Intelligence Azure Sentinel
• Integrate Microsoft Defender Xdr with Microsoft Sentinel

Products: Azure Log Analytics, Microsoft Sentinel, Microsoft Defender

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection

Duration: 215 minutes

Connect Azure assets to Microsoft Defender for Cloud

Units in this learning path:

• Introduction
• Explore Manage Your Resources with Asset Inventory
• Configure Auto Provisioning
• Manual Azure Monitor Agent Provisioning
• Knowledge Check
• Summary Resources

Products: Azure, Defender For Cloud

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Cloud Security, Threat Protection, Asset Management, Inventory Management

Duration: 35 minutes

Connect Common Event Format logs to Microsoft Sentinel

Units in this learning path:

• Introduction
• Plan for Connector
• Connect Your External Solution Use Connector
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Sentinel, Azure Log Analytics

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Security, Cloud Security, Threat Protection

Duration: 20 minutes

Connect Microsoft Defender XDR to Microsoft Sentinel

Units in this learning path:

• Introduction
• Plan for Microsoft 365 Defender Connectors
• 365 Defender Connector
• Connect Microsoft Defender Cloud Connector
• Connect Microsoft Defender Iot
• Connect Microsoft Defender Legacy Connectors
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Sentinel, Defender For Cloud, Defender For Iot, Defender Xdr

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection, Cloud Security

Duration: 29 minutes

Connect Microsoft services to Microsoft Sentinel

Units in this learning path:

• Introduction
• Plan for Connectors
• Connect Office 365 Connector
• Connect Azure Active Directory Connector
• Connect Azure Active Directory Identity Protection Connector
• Connect Azure Activity Connector
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Sentinel, Entra Id, Defender Xdr

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Cloud Security

Duration: 26 minutes

Connect Windows hosts to Microsoft Sentinel

Units in this learning path:

• Introduction
• Plan for Security Events Connector
• Configure Data Collection Rules
• Connect Windows Hosts
• Collect Sysmon Event Logs
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Sentinel, Windows Security, Sysinternals, Azure Policy

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection

Duration: 26 minutes

Connect data to Microsoft Sentinel using data connectors

Units in this learning path:

• Introduction
• Ingest Log Data
• Understand Data Connector Providers
• View Connected Hosts
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Defender, Microsoft Sentinel, Azure Log Analytics

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection

Duration: 22 minutes

Connect on-premises servers, AWS accounts, and GCP projects to Microsoft Defender for Cloud to extend unified security coverage across a hybrid and multicloud estate. Learn how federated authentication secures connector access, plan connector strategy, and configure native connectors for AWS and GCP.

Units in this learning path:

• Introduction
• Explore Multicloud Connectivity Model
• Plan Connector Strategy
• Connect on Premises Azure Arc
• Connect Amazon Accounts
• Connect Google Projects
• Verify Multicloud Coverage
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 52 minutes

Connect logs to Microsoft Sentinel

Modules in this learning path:

• Connect Data to Azure Sentinel with Data Connectors
• Connect Microsoft Services to Azure Sentinel
• Connect Microsoft Defender 365 to Azure Sentinel
• Connect Windows Hosts to Azure Sentinel
• Connect Common Event Format Cef Logs to Azure Sentinel
• Connect Syslog Data Sources to Azure Sentinel
• Connect Threat Indicators to Azure Sentinel

Products: Azure, Azure Log Analytics, Microsoft Sentinel

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Cloud Security

Duration: 184 minutes