Implement the Microsoft Defender for Endpoint environment to manage devices, perform investigations on endpoints, manage incidents in Defender XDR, and use Advanced Hunting with Kusto Query Language (KQL) to detect unique threats.

Prerequisites

• Experience using the Microsoft Defender portal
• Basic understanding of Microsoft Defender for Endpoint
• Basic understanding of Microsoft Sentinel
• Experience using Kusto Query Language (KQL) in Microsoft Sentinel

Modules in this learning path

• Mitigate incidents using Microsoft Defender
• Deploy the Microsoft Defender for Endpoint environment
• Configure for alerts and detections in Microsoft Defender for Endpoint
• Configure and manage automation using Microsoft Defender for Endpoint
• Perform device investigations in Microsoft Defender for Endpoint
• Defend against Cyberthreats with Microsoft Defender XDR lab exercises