Learn how to use Microsoft Sentinel to monitor security events, detect potential threats, investigate incidents, and strengthen an organization’s security operations. This beginner-friendly course introduces Security Information and Event Management (SIEM), security analytics, threat detection, incident investigation, and the core capabilities of Microsoft’s cloud-native security information and event management platform. Explore how Microsoft Sentinel collects security data from connected sources, uses analytics rules to identify suspicious activity, and supports incident investigation and response.
Understand workspaces, data connectors, analytics, automation, and threat intelligence concepts while learning how security teams use centralized monitoring to improve visibility across their environments. Through guided demonstrations and practical scenarios, you will develop foundational knowledge of security monitoring and threat detection workflows. This course is suitable for learners beginning their cybersecurity journey and IT professionals seeking to understand Microsoft’s security operations ecosystem.
