Implement the Microsoft Defender for Endpoint environment to manage devices, perform investigations on endpoints, manage incidents in Defender XDR, and use Advanced Hunting with Kusto Query Language (KQL) to detect unique threats.Note: You'll need to have access to a Microsoft 365 E5 Tenant with a Microsoft Defender for Endpoint P2 license to perform the exercises. Module 1: Mitigate incidents using Microsoft DefenderIntroductionUse the Microsoft Defender portalManage incidentsInvestigate incidentsManage and investigate alertsManage automated investigationsUse the action centerExplore advanced huntingInvestigate Microsoft Entra sign-in logsUnderstand Microsoft Secure ScoreAnalyze threat analyticsAnalyze reportsConfigure the Microsoft Defender portalKnowledge checkSummary and resourcesModule 2: Deploy the Microsoft Defender for Endpoint environmentIntroductionCreate your environmentUnderstand operating systems compatibility and featuresOnboard devicesManage accessCreate and manage roles for role-based access controlConfigure device groupsConfigure environment advanced featuresKnowledge checkModule 3: Configure for alerts and detections
