Microsoft SoC Program Foundation Training
Microsoft SoC Program Foundation Training
What you’ll learn
- Understand Security operation Center from Microsoft Lens..
- Understand Tools & Technologies in & around SoC which Microsoft Leverages.
- Understand why SoC in needed.
- Exhaustive Hands on SoC.
Course Content
- Introduction –> 1 lecture • 5min.
- Lesson 1 Overview –> 1 lecture • 48min.
- Lesson 2 Microsoft SoC Tools & Technologies –> 1 lecture • 44min.
- Lesson 3 SoC Tools & Technologies –> 1 lecture • 29min.
- Best Practices –> 1 lecture • 21min.
Requirements
Microsoft SoC Program Foundation Training
Course Description:
The Microsoft SoC Program Foundation Training is designed to equip security professionals, IT administrators, and aspiring SOC analysts with the foundational knowledge and skills required to operate within a Security Operations Center (SOC) using Microsoft’s security ecosystem.
This course provides a structured overview of SOC processes, tools, and best practices, with a focus on Microsoft’s integrated security solutions such as Microsoft Sentinel, Microsoft Defender XDR, and Microsoft Defender for Cloud. Participants will learn how to detect, investigate, and respond to threats effectively while aligning with industry frameworks like MITRE ATT&CK, NIST, and Zero Trust principles.
Key Learning Outcomes:
By the end of this course, learners will be able to:
- Understand the roles and responsibilities within a SOC environment.
- Gain foundational knowledge of Microsoft SOC architecture and ecosystem.
- Learn incident detection, investigation, and response workflows using Microsoft Sentinel and Defender solutions.
- Apply threat intelligence and map attacks to the MITRE ATT&CK framework.
- Explore compliance and governance considerations (ISO 27001, Microsoft Cloud Security Benchmark, NIST CSF).
- Practice building SOC playbooks and automation for real-world scenarios.
- Strengthen reporting and dashboarding skills for SOC management and business stakeholders.
Target Audience:
- Security Analysts beginning their SOC journey
- IT & Cloud Administrators moving into Security Operations
- Professionals working with Microsoft Security solutions
- Learners preparing for Microsoft SC-200 (Security Operations Analyst Associate)