Course information

Configure SIEM Security Operations using Microsoft Sentinel (SC-5001) Course Outline

Module 1: Create and Manage Microsoft Sentinel Workspaces

  • Plan for the Microsoft Sentinel workspace
  • Create a Microsoft Sentinel workspace
  • Manage Workspaces Across Tenants using Azure Lighthouse
  • Understand Microsoft Sentinel Permissions and Roles
  • Manage Microsoft Sentinel Settings
  • Configure Logs

Module 2: Connect Microsoft services to Microsoft Sentinel

  • Plan for Microsoft Services Connectors
  • Connect the Microsoft Office 365 Connector
  • Connect the Microsoft Entra Connector
  • Connect the Microsoft Entra ID Protection Connector
  • Connect the Azure Activity Connector

Module 3: Connect Windows Hosts to Microsoft Sentinel

  • Plan for Windows Hosts Security Events Connector
  • Connect Using the Windows Security Events Via AMA Connector
  • Connect Using the Security Events Via Legacy Agent Connector
  • Collect Sysmon Event Logs

Module 4: Threat Detection with Microsoft Sentinel Analytics

  • Exercise - Detect Threats with Microsoft Sentinel Analytics
  • What is Microsoft Sentinel Analytics?
  • Types of Analytics Rules
  • Create an Analytics Rule from Templates
  • Create an Analytics Rule from Wizard
  • Manage Analytics Rules
  • Exercise - Detect Threats with Microsoft Sentinel Analytics

Module 5: Automation in Microsoft Sentinel

  • Understand Automation Options
  • Create Automation Rules

Module 6: Configure SIEM Security Operations using Microsoft Sentinel

  • Exercise - Configure SIEM Operations using Microsoft Sentinel
  • Exercise - Install Microsoft Sentinel Content Hub Solutions and Data Connectors
  • Exercise - Configure a Data Connector Data Collection Rule
  • Exercise - Perform a Simulated Attack to Validate the Analytic and Automation Rules

Show moredowndown

Who Should Attend this Configure SIEM Security Operations using Microsoft Sentinel (SC-5001)?

This Configure SIEM Security Operations using Microsoft Sentinel (SC-5001) Course is designed for anyone who wants to effectively set up and utilise Microsoft Sentinel for Security Information and Event Management (SIEM). However, this training will be beneficial for:

  • Cybersecurity Analysts
  • Security Operations Centre (SOC) Analysts
  • IT Security Engineers
  • SIEM Administrators
  • Threat Intelligence Analysts
  • Network Security Managers
  • Compliance and Audit Officers

Prerequisites of the Configure SIEM Security Operations using Microsoft Sentinel (SC-5001) Course

There are no formal prerequisites for attending this Configure SIEM Security Operations using Microsoft Sentinel (SC-5001) Course.

Configure SIEM Security Operations using Microsoft Sentinel (SC-5001) Course Overview

Configure SIEM Security Operations using Microsoft Sentinel (SC-5001) is a focused training course that teaches how to set up and manage Security Information and Event Management (SIEM) operations using Microsoft Sentinel. The importance of this course stems from the growing need to safeguard digital infrastructures and data effectively against increasing cybersecurity threats. For organisations, the training enables the setup of a robust SIEM system that enhances threat detection and response capabilities, crucial for maintaining security and compliance. For individuals, it provides deep insights into cloud-based security operations, enhancing skill sets in a critical area of IT security. Career-wise, the course prepares participants for advanced roles in cybersecurity, such as SIEM administrators, security analysts, or security consultants, where expertise in cutting-edge security technologies is highly valued.

In this course, delegates will learn how to effectively configure and manage Microsoft Sentinel as a SIEM system. They will start by setting up Sentinel workspaces, understanding and managing permissions, and configuring data collection across multiple platforms and services. Delegates will also learn to connect and monitor various data sources, including Microsoft services and third-party applications. This training will be conducted by our highly professional and skilled trainer, who has years of experience in teaching.

Course Objectives

  • To deploy Microsoft Sentinel workspaces optimised for organisational needs
  • To integrate and manage data connectors from Microsoft services and third parties
  • To create advanced analytics rules to detect security threats effectively
  • To implement automation for efficient security incident response
  • To configure and manage permissions, roles, and settings within Microsoft Sentinel
  • To practice and refine security configurations with real-world simulations

After attending this training course, delegates will be able to effectively configure and utilise Microsoft Sentinel as a powerful SIEM tool within their organisations. They will be capable of integrating a variety of data sources, designing sophisticated analytics to monitor security threats, and implementing automated workflows to respond to incidents rapidly.

Show moredowndown

What’s included in this Configure SIEM Security Operations using Microsoft Sentinel SC5001 Course?

  • World-Class Training Sessions from Experienced Instructors 
  • Configure SIEM Security Operations using Microsoft Sentinel SC5001 Course Certificate
  • Digital Delegate Pack

Why choose us

Our Edmonton venue

Includes..

Free Wi-Fi

To make sure you’re always connected we offer completely free and easy to access wi-fi.

Air conditioned

To keep you comfortable during your course we offer a fully air conditioned environment.

Full IT support

IT support is on hand to sort out any unforseen issues that may arise.

Video equipment

This location has full video conferencing equipment.

Edmonton is the capital city of the province of Alberta in Canada. It’s the second largest city in Alberta and the fifth in Canada, with a population of around 850,000 people. Edmonton is known as ‘Canada’s Festival City’ for the fact is hosts a large amount of festivals over the year. Edmonton is the centre of a number of large oil sands projects and diamond mining activities occurring in the northwest territories of Canada. There are two English school boards in Edmonton and one French school board which govern the public schools. There are also a large amount of private schools, not governed by any board, and many parents choose to home-school their children. Schools in Edmonton are funded by property taxes and a large number of provincial grants but also provide resources and support for those who home-school or are home-schooled. There are six universities in Edmonton; Concordia University College of Alberta, MacEwan University, The King's University College, NorQuest College, Northern Alberta Institute of Technology (NAIT) and the University of Alberta, providing a large amount of degrees and programs for students. The largest is the University of Alberta and educates up for 40,000 students on around 400 programs. The second in the MacEwan University which caters to around 40,000 students, 14,000 of these being full-time. This university provides degrees, diplomas and certificates in a wide number of programs. Miscellaneous educational institutions include Taylor University College and Seminary and the Yellowhead Tribal College, which is a First Nations college.

Show moredown

Address

Intelligent Office
Scotia Place
Tower 1,
10060 Jasper Avenue
Suite 2020 (20th Floor)
Edmonton
Alberta
T5J 3R8

T: +1 6474932992

Ways to take this course

Experience live, interactive learning from home with The Knowledge Academy's Online Instructor-led Configure SIEM Security Operations Using Microsoft Sentinel SC5001 Course in Edmonton. Engage directly with expert instructors, mirroring the classroom schedule for a comprehensive learning journey. Enjoy the convenience of virtual learning without compromising on the quality of interaction.

Unlock your potential with The Knowledge Academy's Configure SIEM Security Operations Using Microsoft Sentinel SC5001 Course in Edmonton, accessible anytime, anywhere on any device. Enjoy 90 days of online course access, extendable upon request, and benefit from the support of our expert trainers. Elevate your skills at your own pace with our Online Self-paced sessions.

Streamline large-scale training requirements with The Knowledge Academy's In-house/Onsite at your business premises. Experience expert-led classroom learning from the comfort of your workplace and engage professional development.

tailored_learning_experience

Tailored learning experience

Leverage benefits offered from a certification that fits your unique business or project needs

budget

Maximise your training budget

Cut unnecessary costs and focus your entire budget on what really matters, the training.

team_building

Team building opportunity

Our offers a unique chance for your team to bond and engage in discussions, enriching the learning experience beyond traditional classroom settings

monitor_progress

Monitor employees progress

The course know-how will help you track and evaluate your employees' progression and performance with relative ease

What our customers are saying

Configure SIEM Security Operations Using Microsoft Sentinel SC5001 Course in Edmonton FAQs

Please arrive at the venue at 8:45am.
We are able to provide support via phone & email prior to attending, during and after the course.
Delegate pack consisting of course notes and exercises, Manual, Experienced Instructor, and Refreshments
This course is [ 1 ] day(s)
Once your booking has been placed and confirmed, you will receive an email which contains your course location, course overview, pre-course reading material (if required), course agenda and payment receipts
The training fees for Configure SIEM Security Operations using Microsoft Sentinel SC5001 Coursein Edmonton starts from CAD5695
The Knowledge Academy is the Leading global training provider for Configure SIEM Security Operations using Microsoft Sentinel SC5001 Course.
Show more down

Why choose us

icon

Best price in the industry

You won't find better value in the marketplace. If you do find a lower price, we will beat it.

icon

Many delivery methods

Flexible delivery methods are available depending on your learning style.

icon

High quality resources

Resources are included for a comprehensive learning experience.

barclays Logo
deloitte Logo
Thames Water Logo

"Really good course and well organised. Trainer was great with a sense of humour - his experience allowed a free flowing course, structured to help you gain as much information & relevant experience whilst helping prepare you for the exam"

Joshua Davies, Thames Water

santander logo
bmw Logo
Google Logo

Looking for more information on Microsoft Security Engineer Training?

backBack to course information

Get a custom course package

We may not have any package deals available including this course. If you enquire or give us a call on +1 6474932992 and speak to our training experts, we should be able to help you with your requirements.

cross

BIGGEST
Christmas SALE!

red-starWHO WILL BE FUNDING THE COURSE?

close

close

Thank you for your enquiry!

One of our training experts will be in touch shortly to go over your training requirements.

close

close

Press esc to close

close close

Back to course information

Thank you for your enquiry!

One of our training experts will be in touch shortly to go overy your training requirements.

close close

Thank you for your enquiry!

One of our training experts will be in touch shortly to go over your training requirements.