Microsoft Defender for Endpoint (MDE)
Offline or Online Microsoft Defender for Endpoint training course.
Get the deep understanding of Microsoft Defender for Endpoint, how to deploy, configure, and manage advanced security features to protect your enterprise environment.
Manoj S. Mahajan
28+ years Experienced Trainer with 100+ certs, View full profile....
Course Description
This course is designed for IT professionals, security analysts, and system administrators who have a foundational understanding of security concepts and some experience with Windows client/server and M365 environments.
It prepares learners not just for certification (like SC-200), but for real-world SecOps roles.
Audience:
- Security Operations Center (SOC) Analysts (Tier 1 & 2)
- System Administrators with security responsibilities
- IT Security Professionals
- Endpoint Security Managers
- Individuals preparing for the Microsoft SC-200 certification.
Goal: Dives deeper into the features, configuration, and operational aspects of Microsoft Defender for Endpoint. Equipping participants to effectively protect their organizations against modern threats.
Prerequisites
- Basic understanding of endpoint security principles.
- Familiarity with the Microsoft 365 admin center.
- Working knowledge of Windows client and server operating systems.
- Exposure to PowerShell scripting (basic commands).
- Conceptual understanding of cloud services (Entra ID, basic Azure concepts).
- Networking knowledge is recommended.
Syllabus
Please check the syllabus tab above. ☝What You'll Learn
Introduction to Microsoft Defender for Endpoint
- Overview and role in enterprise security
- Key components and architecture
- Understanding Zero Trust principles
- Integration within Microsoft 365 Defender
- How Defender for Endpoint fits into the Microsoft Defender XDR ecosystem
- Understanding licensing and platform support
Deployment and Onboarding
- Onboarding methods for Windows and non-Windows devices
- Configuring deployment via Microsoft Endpoint Manager (Intune), Group Policy, or scripts
- Endpoint onboarding best practices
- Deployment phases and managing initial configuration
- Understanding role-based access control (RBAC)
Core Capabilities Deep Dive
- Threat and Vulnerability Management
- Attack Surface Reduction capabilities
- Endpoint Detection and Response (EDR)
- Automated Investigation and Remediation (AIR)
- Microsoft Defender Application Guard and Exploit Guard
- Web Protection, Network Protection, Windows Defender System Guard and Application Control
Advanced Configuration and Security Policies
- Configuring attack surface reduction rules and custom detection
- Tamper protection and endpoint hardening
- Integration with Microsoft Defender for Cloud and Microsoft Sentinel
- Managing alerts, notifications, and threat analytics
- Device tagging and grouping for policy targeting
Monitoring, Investigation, and Response
- Navigating Defender for Endpoint portal and device timelines
- Using Live Response and Remote Management tools
- Hunting for threats using built-in query tools (Kusto Query Language - KQL basic intro)
- Indicators of Compromise (IoCs) and Advanced Incident Queue usage
- Understanding device isolation and containment actions
- Managing remediations and threat notifications
Threat Hunting and Incident Handling
- Fundamentals of threat hunting
- Understanding unmanaged devices and network discovery
- Case studies on investigation and remediation workflows
- Endpoint attack notifications and response procedures
- Custom detection rules and alert tuning strategies
Hands-On Labs and Simulated Exercises
- Onboarding devices and deploying policies
- Configuring attack surface reduction and exploit guard rules
- Simulating alerts and practicing response workflows
- Using Defender portal and Sentinel integration for alert correlation
Sachin
Training was excellent with good interaction. Knowledge sharing is good. Recording facility is excellent for revising. Course was practically and informative. Manoj Sir is enthusiastic and really aware of what he is explaining. The course helped to build confidence, Valuable experiences and learning. Read more....
Prashant
It was a really very good experience. All the details covered by sir is really great. Every smallest information was well explained by sir. I am really thankful to sir. Read more....
Bahumol
I really like this course, training environment and seating arrangement very good. Read more....
