Design solutions for security operations

You learn techniques to design security operations capabilities including logging, auditing, Security Information and Event Management (SIEM), Security Orchestration and Automated Response (SOAR), and security workflows.

Note

This content was partially created with the help of AI. An author reviewed and revised the content as needed. Read more.

Security Engineer

Solution Architect

Azure

Microsoft Sentinel

Microsoft Defender for Cloud

Microsoft Defender for Cloud Apps

Microsoft Defender for Identity

Module Objectives

By the end of this module, you are able to:

Design security operations capabilities in hybrid and multicloud environments.
Design centralized logging and auditing.
Design Security Information and Event Management (SIEM) solutions.
Design a solution for detection and response that includes Extended Detection and Response (XDR).
Design a solution for security orchestration, automation, and response (SOAR).
Design security workflows.
Design and evaluate threat detection with the MITRE ATT&CK framework.

Units

Prerequisites

Advanced experience and knowledge in identity and access, platform protection, security operations, securing data, and securing applications.
Experience with hybrid and cloud implementations.