MEAPSA

Perform actions on a device using Microsoft Defender for Endpoint

Learn how Microsoft Defender for Endpoint provides the remote capability to contain devices and collect forensics data.

Security Operations Analyst

Microsoft 365

Microsoft 365 Security Center

Defender Endpoint

Module Objectives

Upon completion of this module, the learner will be able to:

Perform actions on a device using Microsoft Defender for Endpoint
Conduct forensics data collection using Microsoft Defender for Endpoint
Access devices remotely using Microsoft Defender for Endpoint

Units

Introduction min
Explain device actions min
Run Microsoft Defender antivirus scan on devices min
Collect investigation package from devices min
Initiate live response session min
Knowledge check min
Summary and resources min

Prerequisites

Intermediate understanding of Windows 10.