SC-200: Microsoft Security Operation Analyst

SC-200: Microsoft Security Operation Analyst - Full Course

День тому

Get hands on learning all the tools you'll need day-to-day working as a Security Operations Analyst within an environment using the Microsoft security stack.
Microsoft Security Operations Analyst Full Course
Email - enquiries@zedsec.io
Twitter - / zed_sec_
Timestamp:
00:00:00 - Introduction
00:05:59 - Microsoft XDR
00:15:20 - Defender for Office 365
00:56:39 - Defender for Endpoint
01:52:43 - Entra ID Protection
02:00:36 - Defender for Identity
02:33:48 - Defender for Cloud Apps
02:56:11 - Microsoft Purview
03:02:09 - Defender for Cloud
03:46:10 - Microsoft Sentinel
04:15:22 - Member thanks (as of recording)

КОМЕНТАРІ: 28

@mist1442 Місяць тому

I just passed SC-200 yesterday in my first take! Adding this course in my study resources really helped me pass the exam! Thank you!

@zedsec Місяць тому

That's awesome to hear! Congrats on the pass, hard work paid off!

@dylanharney107 Місяць тому

Hi @mist1442, is there any other resources alongside this course that you'd recommend? Congrats on the pass!

@mist1442 Місяць тому

Hi @@dylanharney107, I mainly used the materials provided by Microsoft and did some free practice exams here in yt and Microsoft. This course by zedsec is my best recommendation for those who are taking the exam. Goodluck! 😄

@mist1442 Місяць тому

Hi@@dylanharney107, I mainly used the materials provided by Microsoft and did some free practice exams here in yt and Microsoft. This course by zedsec is my best recommendation for those who are preparing for the sc200 exam. Goodluck!! 😄

@tekwaveagile4789 Місяць тому

You are F*kin genius dude !!! This is the best video I have watched that covers all MS Security products stack in one setting and in simple authentic humane manor. Kudos to you man for your time putting it together !

@zedsec Місяць тому

So glad it was helpful!

@dropcake 5 днів тому

Just passed the SC-200 - thanks for this course! Helped a lot with the Sentinel part.

@zedsec 5 днів тому

Awesome job on the pass, hard work paid off!

@anshulgera3 26 днів тому

Thanks mate, excellent coverage acrosss all the important topics.

@zedsec 25 днів тому

Thanks so much!

@daniel.s8126 29 днів тому

Great videos. Thanks mate! As an Aussie, I have a chuckle at the random F bombs scattered throughout. Makes me feel at home.

@zedsec 28 днів тому

Results have shown that watching SC-200 videos where the host can’t stop swearing actually triples your chances of passing!

@_vr Місяць тому

You are a god! Clear speech and straight to the point, doesn't beat around the meat. I find it way harder to follow videos with an eastern world speaking tutor, mostly around India. So seeing this is really refreshing when it comes to understanding. So thank you for providing this!

@zedsec Місяць тому

Thank you for watching! I’m so glad to hear you found it useful!

@silindokuhlemakhathini9319 2 місяці тому

Thank you for this course...firstly it is very engaging and I have had such a hard time following other courses,and also gives me so much confidence to tackle the exam because as much as I work in a soc there are so many functions I do not have access to so this is very great..thank you

@zedsec 2 місяці тому

Thanks for the feedback, I'm glad you found some value from the course, hopefully you'll smash the exam when you sit it!

@SecureITGirl 2 місяці тому

Thank you for your effort! I failed my second attempt on this exam recently. I think the problem is related to lack of experience. I work with Intune only.

@zedsec 2 місяці тому

Good luck when you resit! I would say hammer your weak spots and take another crack at it!

@Jcewazhere 2 місяці тому

I failed it twice too. First time was because work wanted us to learn and take the exam within 2 weeks. Big customer blah blah. Second time was after I had been using Sentinel for a bit, was getting somewhat comfortable with KQL and working incidents, but that doesn't help for ~70% of the exam Zed here is the best I've found, even including some paid stuff like Pluralsight.

@zedsec 2 місяці тому

You’re making me blush!

@SecureITGirl 2 місяці тому

I would really appreciate it if you would go through the Applied Skills related to the security umbrella 😊

@zedsec 2 місяці тому

Thanks for the suggestion, I’ve actually been meaning to look into the Applied Skills stuff a bit more!

@Zachsnotboard 24 дні тому

So can you use advance hunting to search for emails used as MFA methods ?

@zedsec 24 дні тому

Yes, it would depend on your specific use case. But, you can use the IdentityLogonEvents table to query authentication. At a high level you can use the EmailEvents table and query on the specific email but that probably wouldn’t be an ideal way to do it.

@Razadog98 4 дні тому

I've seen a few posts on MS forums about MSLearn not being updated as of the recent changes to Sc-200. I presume its just the names of the products as well as the % of each section?

@zedsec 4 дні тому

Most changes should be reflected on the SC-200 page on MS. I know the weighing a were changed maybe 3 months ago, and those were updated on MS learn. Any changes since then thing I’m unsure. For the most part the biggest change is 365 Defender is now Defender XDR. Some of the wording on the objectives of each topic has also been changed but it doesn’t seem to have an effect on the content of what you should be studying. A lot of it seemed to be around clearing up confusion with the prior objectives wording.

@Razadog98 4 дні тому

@@zedsec thanks for replying , enjoying your course !