Explore digital courses

Learn how to deploy security baselines, onboard devices to Microsoft Defender for Endpoint, configure attack surface reduction rules, and monitor security posture across your organization.

Units in this learning path:

• Introduction
• Security Baselines
• Microsoft Defender Endpoint
• Attack Surface Reduction
• Exercise Harden Monitor Endpoints
• Knowledge Check
• Summary

Products: Intune, Defender Endpoint, Windows 11

Roles: Administrator, Security Engineer

Level: Intermediate

Subjects: Security, Threat Protection, Cloud Computing

Duration: 40 minutes

Hunt for threats using notebooks in Microsoft Sentinel

Units in this learning path:

• Introduction
• Access Azure Sentinel Data with External Tools
• Hunt
• Create Notebook
• Explore Notebook Code
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Sentinel

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection

Duration: 31 minutes

This certificate earner has advanced technical skills in cybersecurity, such as security posture evaluation, vulnerability assessment, network architecture, cloud infrastructure security, security operations, and incident reporting. Through completion of a comprehensive curriculum, application-based assessments, and authentic experiential learning, the earner has developed workplace and career management skills and industry knowledge, and is prepared for a cybersecurity career across industries.

This credential earner has the advanced skills to implement, monitor, and troubleshoot security measures to ensure the protection of sensitive information and compliance with relevant policies and regulations. The individual has the technical knowledge and practical skills to secure hardware and software, implement technical controls, manage data, respond to security incidents, implement disaster recovery plans, and troubleshoot issues. The earner has practiced essential workplace skills.

Discover and assess AI data risks in your environment using Microsoft Purview Data Security Posture Management (DSPM) for AI. Configure DSPM, assess SharePoint overexposure, and identify risks in Copilot and AI app interactions.

Units in this learning path:

• Introduction
• Configure Purview AI
• Assess Sharepoint Overexposure
• Identify Risks Copilot AI Interactions
• Knowledge Check
• Summary

Products: Microsoft Purview, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 21 minutes

Identify and mitigate AI data security risks.

Units in this learning path:

• Introduction
• Understand AI Security Risks
• Dspm AI Overview
• Configure Dspm AI
• Dspm AI Recommendations
• Review AI Security Reports
• Data Assessments
• Knowledge Check
• Summary

Products: Microsoft Purview, M365

Roles: Auditor, Administrator, Risk Practitioner

Level: Intermediate

Subjects: Information Protection Governance, Security

Duration: 48 minutes

Learn to use Cloud Security Posture Management (CSPM) in Microsoft Defender for Cloud to identify, prioritize, and trace security risks across Azure cloud and AI workloads — including attack path analysis and proactive risk hunting.

Units in this learning path:

• Introduction
• Explore Plans Posture Visibility
• Analyze Security Recommendations Risk Prioritization
• Identify Attack Paths Choke Points
• Hunt Risks Cloud Security Explorer
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 35 minutes

Learn how to use CodeQL to analyze the code in your GitHub repository and identify security vulnerabilities.

Units in this learning path:

• 1 Introduction
• 2 How Prepare Database Codeql
• 3 Run Codeql Database
• 4 Understand Results
• 5 Troubleshoot Your Results
• 6 Knowledge Check
• 7 Summary

Products: Github

Roles: Devops Engineer, Administrator, Developer, Student

Level: Intermediate

Subjects: Threat Protection

Duration: 33 minutes

Identify threats with Behavioral Analytics

Units in this learning path:

• Introduction
• Understand User Entity Behavior Analytics
• Explore Entities
• Display Information
• Use Anomaly Detection Analytical Rule Templates
• Knowledge Check
• Summary Resources

Products: Azure, Microsoft Sentinel

Roles: Security Operations Analyst

Level: Intermediate

Subjects: Threat Protection

Duration: 30 minutes

Implement security policies for backend API protection using Azure API Management. Configure subscription key management, JSON Web Token (JWT) validation, and OAuth 2.0 policies, and apply IP filtering and rate limiting. Then enforce mutual Transport Layer Security (mTLS) for secure backend API connections, and configure AI Gateway to secure and govern AI model endpoints.

Units in this learning path:

• Introduction
• Configure Authentication Authorization Policies
• Implement Network Security Threat Protection
• Secure Management Back End Connections
• Configure Application Gateway Management
• Knowledge Check
• Summary

Products: Azure, Azure API Management, Azure Openai, Defender For Cloud

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 36 minutes

Enable Microsoft Defender for Databases to detect SQL injection, anomalous query patterns, and vulnerability exposures across Azure SQL services. Enable protection at subscription scope using Azure Policy, configure vulnerability assessment baselines, and route security alerts to the security operations team.

Units in this learning path:

• Introduction
• Explore Defender Databases Capabilities
• Enable Defender Azure SQL Databases
• Enable Defender Open Source Databases
• Configure Vulnerability Assessment
• Configure Alert Routing Validate Coverage
• Knowledge Check
• Summary

Products: Azure, Azure SQL Database, Azure SQL Managed Instance, Microsoft Defender

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Databases

Duration: 21 minutes

Onboard Azure virtual machines and Arc-connected hybrid servers to Microsoft Defender for Servers. Select Plan 1 or Plan 2, configure vulnerability scanning using agentless and agent-based approaches. Then integrate Microsoft Defender for Endpoint, manage agentless scanning, and enable File Integrity Monitoring.

Units in this learning path:

• Introduction
• Onboard Servers Defender Servers
• Configure Vulnerability Scanning
• Configure Endpoint Agentless Scan File Integrity Monitoring
• Knowledge Check
• Summary

Products: Defender For Cloud, Azure Virtual Machines, Azure Arc, Azure

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 26 minutes