Create and manage Microsoft Sentinel workspaces

Module
9 Units

Intermediate

Security Operations Analyst

Microsoft Defender

Microsoft Sentinel

Azure Log Analytics

Learn about the architecture of Microsoft Sentinel workspaces to ensure you configure your system to meet your organization's security operations requirements.

Learning objectives

Upon completion of this module, the learner will be able to:

Describe Microsoft Sentinel workspace architecture
Onboard a Microsoft Sentinel workspace to Microsoft Defender
Manage a Microsoft Sentinel workspace in Microsoft Defender

Prerequisites

Basic experience with Microsoft Defender and Azure services

Introduction min
Plan for the Microsoft Sentinel workspace min
Create a Microsoft Sentinel workspace min
Manage workspaces across tenants using Azure Lighthouse min
Understand Microsoft Sentinel permissions and roles min
Manage Microsoft Sentinel settings min
Configure logs min
Module assessment min
Summary and resources min

Start