About This Course
<p><span>We really hope you'll agree, this training is way more than the average course on Udemy!</span></p><p><span>Have access to the following:</span></p><ul><li><p>Training from an instructor of over 25+ years who has trained thousands of people and also a Microsoft Certified Trainer</p></li><li><p>Lecture that explains the concepts in an easy to learn method for someone that is just starting out with this material</p></li><li><p>Instructor led hands on and simulations to practice that can be followed even if you have little to no experience</p></li></ul><p><span>TOPICS COVERED INCLUDING HANDS ON LECTURE AND PRACTICE TUTORIALS:</span></p><p><span>Introduction</span></p><ul><li><p>Welcome to the course!</p></li><li><p>Understanding the Microsoft 365 and Azure Environment</p></li><li><p>A Solid Foundation of Active Directory Domains</p></li><li><p>A Solid Foundation of RAS, DMZ, and Virtualization</p></li><li><p>A Solid Foundation of the Microsoft Cloud Services</p></li><li><p>IMPORTANT Using Assignments in the course</p></li><li><p>Questions for John Christopher</p></li><li><p>Certificate of Completion</p></li></ul><p><span>Setting up for hands on</span></p><ul><li><p>DONT SKIP: Before beginning your account setup</p></li><li><p>Creating a trial Microsoft 365/Azure Account</p></li><li><p>Disable Security Defaults in Entra ID before proceeding</p></li><li><p>Configuring Microsoft Entra for device management</p></li><li><p>Using a Hyper-V virtual machine or an Azure virtual machine</p></li><li><p>Setting up an Azure virtual machine for hands on</p></li><li><p>HYPER-V: Getting Hyper-V Installed on Windows</p></li><li><p>HYPER-V: Creating a Virtual Switch in Hyper-V</p></li><li><p>HYPER-V: Downloading the Windows 11 ISO</p></li><li><p>HYPER-V: Installing a Windows 11 virtual machine</p></li></ul><p><span>Device management support with Microsoft Entra</span></p><ul><li><p>Overview of device management of Microsoft device managements concepts</p></li><li><p>Registering devices vs joining devices with Microsoft Entra</p></li><li><p>Joining our virtual machine to Microsoft Entra</p></li></ul><p><span>Introduction to Endpoint Security & Microsoft Defender for Endpoint</span></p><ul><li><p>What is Endpoint Security?</p></li><li><p>High level overview of Microsoft Defender for Endpoint</p></li><li><p>Licensing and Plan Comparison (P1 vs P2)</p></li><li><p>Microsoft 365 Defender Portal Tour</p></li><li><p>How Defender for Endpoint relates to Microsoft Intune</p></li><li><p>Introduction to Microsoft Intune for device management</p></li></ul><p><span>Setting Up Defender for Endpoint</span></p><ul><li><p>Prerequisites and Supported Operating Systems</p></li><li><p>Creating a Microsoft Defender Admin role for permissions</p></li><li><p>Onboarding a Windows device to Defender for Endpoint</p></li><li><p>Mass automatic onboarding with Microsoft Intune</p></li><li><p>Verifying Windows devices have been onboarded</p></li><li><p>Implementing device discovery</p></li></ul><p><span>Defender for Endpoint Vulnerability Management</span></p><ul><li><p>What are Common Vulnerabilities and Exposures (CVEs)?</p></li><li><p>Inspecting vulnerabilities on a specific device</p></li><li><p>Using the vulnerability management dashboard for high level overview</p></li><li><p>Improving security with the help of vulnerability recommendations</p></li><li><p>Utilizing remediation within vulnerability management</p></li><li><p>Creating and managing Device Groups for Defender for Endpoint</p></li></ul><p><span>Configuration and Policy Management</span></p><ul><li><p>Hardening endpoint security by using Endpoint Security Policies</p></li><li><p>Attack Surface Reduction (ASR) Rules</p></li><li><p>What is Next-Gen Protection with Microsoft Defender for Endpoint?</p></li><li><p>Understanding the local anti-virus settings on Windows 11</p></li><li><p>Implementing Next-Gen Protection for devices</p></li><li><p>Understanding the local Defender Firewall settings on Windows 11</p></li><li><p>Implementing Firewall Rule Policies using Defender for Endpoint</p></li><li><p>Using Security Baselines in securing our devices</p></li></ul><p><span>Utilizing Microsoft Purview Endpoint DLP (Data Loss Prevention)</span></p><ul><li><p>Understanding the concepts of DLP (Data Loss Prevention)</p></li><li><p>Considering device requirements before using Endpoint DLP</p></li><li><p>Settings for configuring Endpoint DLP</p></li><li><p>Configuring DLP policies with advanced rules</p></li><li><p>Enabling just-in-time (JIT) protection</p></li><li><p>How to monitor for endpoint activities</p></li></ul><p><span>Incident Response and Investigation</span></p><ul><li><p>What is Automated Investigation and Remediation (AIR)?</p></li><li><p>Implementing Automated Investigation and Remediation (AIR) within device groups</p></li><li><p>Triggering incidents using a client device for testing</p></li><li><p>Investigating incidents generated by Defender managed devices</p></li><li><p>Viewing alerts generated by Defender managed devices</p></li><li><p>Managing and classifying detected alerts</p></li></ul><p><span>Kusto Query Language (KQL)</span></p><ul><li><p>What is Kusto Query Language (KQL)?</p></li><li><p>Using the Microsoft KQL Demo environment, downloading resource materials and AI</p></li><li><p>Basic KQL syntax for searching for information</p></li><li><p>Summarizing KQL results and filtering based on time ranges</p></li><li><p>Controlling KQL data displayed based on columns, amounts and characters</p></li><li><p>Using KQL variables and combining output data</p></li><li><p>Running Threat Hunting Queries with Advanced Hunting (KQL)</p></li><li><p>Utilizing Microsoft's Sentinel and Defender repository of premade KQL Queries</p></li></ul>
What you'll learn:
- Learn the concepts and perform hands on activities needed to master Microsoft Defender for Endpoint
- Gain a tremendous amount of knowledge involving Microsoft Defender for Endpoint
- Learn using hands on simulations on how Microsoft Defender for Endpoint is administered!
- Learn how to set up your own test lab for practicing the concepts!