Mitigate incidents using Microsoft 365 Defender

Learn how the Microsoft 365 Defender portal provides a unified view of incidents from the Microsoft 365 Defender family of products.

Security Operations Analyst

Microsoft 365

Microsoft 365 Security Center

Module Objectives

Upon completion of this module, the learner will be able to:

Manage incidents in Microsoft 365 Defender
Investigate incidents in Microsoft 365 Defender
Conduct advanced hunting in Microsoft 365 Defender

Units

Introduction min
Use the Microsoft Defender portal min
Manage incidents min
Investigate incidents min
Manage and investigate alerts min
Manage automated investigations min
Use the action center min
Explore advanced hunting min
Investigate Microsoft Entra sign-in logs min
Understand Microsoft Secure Score min
Analyze threat analytics min
Analyze reports min
Configure the Microsoft Defender portal min
Knowledge check min
Summary and resources min

Prerequisites

Intermediate understanding of Microsoft 365.