Recommended training for SIEM and XDR from the Azure portal

• Applies to:

  Microsoft Sentinel in the Azure portal

This article lists recommended training modules for using Microsoft Sentinel with Microsoft Defender XDR and Microsoft Defender for Cloud, an XDR solution for Zero Trust.

Training content doesn't currently cover scenarios where Microsoft Sentinel is onboarded to the Defender portal.

Feature coverage

Explore security solutions in Microsoft Defender XDR

Training	Explore security solutions in Microsoft Defender XDR
	This module introduces several features in Microsoft 365 that help protect your organization against cyberthreats, detect when a user or computer is compromised, and monitor your organization for suspicious activities.

Start

Introduction to Microsoft Sentinel

Training	Introduction to Microsoft Sentinel
	Learn how Microsoft Sentinel lets you start getting valuable security insights from your cloud and on-premises data quickly.

Start >

Deployment

Enable and manage Microsoft Defender for cloud

Training	Enable and manage Microsoft Defender for Cloud
	Use Microsoft Defender for cloud to strengthen security posture and protect workloads against modern threats.

Start >

Connect Microsoft Defender XDR to Microsoft Sentinel

Training	Connect Microsoft Defender XDR to Microsoft Sentinel
	Learn about the configuration options and data provided by Microsoft Sentinel connectors for Microsoft Defender XDR

Start >

Configure your Microsoft Sentinel environment

Training	Configure your Microsoft Sentinel environment
	Get started with Microsoft Sentinel by configuring the Microsoft Sentinel workspace.

Start >

Create and manage Microsoft Sentinel workspaces

Training	Create and manage Microsoft Sentinel workspaces
	Learn about the architecture of Microsoft Sentinel workspaces to ensure you configure your system to meet your organization's security operations requirements.

Start

Connect data to Microsoft Sentinel using data connectors

Training	Connect data to Microsoft Sentinel using data connectors
	The primary approach to connect log data is using the Microsoft Sentinel provided data connectors. This module provides an overview of the available data connectors.

Start >

Connect logs to Microsoft Sentinel

Training	Connect logs to Microsoft Sentinel
	Connect data at cloud scale across all users, devices, applications, and infrastructure, both on-premises and in multiple clouds to Microsoft Sentinel.

Start >

Threat detection

Identify threats with Behavioral Analytics

Training	Identify threats with Behavioral Analytics
	The primary approach to connect log data is using the Microsoft Sentinel-provided data connectors. This module provides an overview of the available data connectors.

Start >