Microsoft Defender for Cloud from Udemy

Microsoft Defender for Cloud, is a carefully curated Udemy course designed for IT professionals aspiring to excel in Microsoft Defender for Cloud, enhancing their capabilities in cloud security posture management and cloud workload protection. This comprehensive course guides you methodically from the initial configuration to advanced implementation, incorporating practical, real-world scenarios.

Acquiring expertise in Microsoft Defender for Cloud, formerly known as Azure Security Center, equips you with the skills to navigate a premier Cloud Native Application Protection Platform (CNAPP), essential in today's cybersecurity and cloud security landscape.

Key Benefits for you:

Overview on Defender for Cloud: Explore the features and capabilities of Microsoft Defender for Cloud for comprehensive cloud security.
SOC Basics: Gain insights into Security Operations Center (SOC) principles for effective threat management and incident response.
Azure Basics: Understand fundamental Azure concepts to establish a strong foundation for cloud security.
Azure Policy: Learn how to enforce governance policies using Azure Policy to ensure compliance and security.
Azure ARC: Discover the benefits of Azure Arc for extending Azure services and management to any infrastructure.
Azure Log Analytics: Harness the power of log analytics to gather actionable insights and enhance security monitoring.
CSPM (Cloud Security Posture Management): Implement CSPM to proactively manage and improve cloud security posture.
Foundational CSPM: Establish a solid foundation in Cloud Security Posture Management for robust security practices.
Defender CSPM: Leverage Defender CSPM for advanced cloud security posture management and threat detection.
Cloud Workload Protection: Secure cloud workloads effectively to safeguard critical applications and data.
Defender for Servers P1 and P2: Enhance server security with Microsoft Defender for Servers at both foundational and advanced levels.
Defender for App Service: Protect your applications with Defender for App Service for a resilient and secure app environment.
Defender for Databases: Safeguard databases against threats using Microsoft Defender for Databases.
Defender for Storage: Ensure the security of your storage solutions with Microsoft Defender for Storage.
Defender for Containers: Secure containerized environments with Microsoft Defender for Containers for enhanced container security.
Defender for Key Vault: Safely manage and protect cryptographic keys and secrets with Defender for Key Vault.
Defender for Resource Manager: Strengthen the security of Azure Resource Manager deployments with Defender.
Defender for APIs: Protect APIs from threats and vulnerabilities using Microsoft Defender for APIs.
Automation: Streamline security processes through automation to improve efficiency and responsiveness.
Integration with Sentinel: Seamlessly integrate with Microsoft Sentinel for enhanced security information and event management.
Integration with Defender for IoT: Enhance IoT security by integrating Microsoft Defender for IoT into your ecosystem.
Integration with Azure WAF: Bolster web application security with seamless integration with Azure Web Application Firewall.
Integration with Azure DDoS Protection Standard: Safeguard against DDoS attacks with integrated protection using Azure DDoS Protection Standard.
Azure Lighthouse: Explore the advantages of Azure Lighthouse for simplified management across multiple Azure environments.
Community: Join a vibrant community to share insights, best practices, and collaborate for ongoing learning and support.

What's inside

Learning objectives

Overview on defender for cloud: explore the features and capabilities of microsoft defender for cloud for comprehensive cloud security
Soc basics: gain insights into security operations center (soc) principles for effective threat management and incident response
Azure basics: understand fundamental azure concepts to establish a strong foundation for cloud security
Azure policy: learn how to enforce governance policies using azure policy to ensure compliance and security
Azure arc: discover the benefits of azure arc for extending azure services and management to any infrastructure
Cspm (cloud security posture management): implement cspm to proactively manage and improve cloud security posture
Foundational cspm: establish a solid foundation in cloud security posture management for robust security practices
Defender cspm: leverage defender cspm for advanced cloud security posture management and threat detection
Cloud workload protection: secure cloud workloads effectively to safeguard critical applications and data
Defender for servers p1 and p2: enhance server security with microsoft defender for servers at both foundational and advanced levels
Defender for app service: protect your applications with defender for app service for a resilient and secure app environment
Defender for databases: safeguard databases against threats using microsoft defender for databases
Defender for storage: ensure the security of your storage solutions with microsoft defender for storage

Defender for containers: secure containerized environments with microsoft defender for containers for enhanced container security
Defender for key vault: safely manage and protect cryptographic keys and secrets with defender for key vault
Defender for resource manager: strengthen the security of azure resource manager deployments with defender
Defender for apis: protect apis from threats and vulnerabilities using microsoft defender for apis
Automation: streamline security processes through automation to improve efficiency and responsiveness
Integration with sentinel: seamlessly integrate with microsoft sentinel for enhanced security information and event management
Integration with defender for iot: enhance iot security by integrating microsoft defender for iot into your ecosystem
Integration with azure waf: bolster web application security with seamless integration with azure web application firewall
Integration with azure ddos protection standard: safeguard against ddos attacks with integrated protection using azure ddos protection standard
Azure lighthouse: explore the advantages of azure lighthouse for simplified management across multiple azure environments
Community: join a vibrant community to share insights, best practices, and collaborate for ongoing learning and support
Show more
Show less

Overview on defender for cloud: explore the features and capabilities of microsoft defender for cloud for comprehensive cloud security
Soc basics: gain insights into security operations center (soc) principles for effective threat management and incident response
Azure basics: understand fundamental azure concepts to establish a strong foundation for cloud security
Azure policy: learn how to enforce governance policies using azure policy to ensure compliance and security
Azure arc: discover the benefits of azure arc for extending azure services and management to any infrastructure
Cspm (cloud security posture management): implement cspm to proactively manage and improve cloud security posture
Foundational cspm: establish a solid foundation in cloud security posture management for robust security practices
Defender cspm: leverage defender cspm for advanced cloud security posture management and threat detection
Cloud workload protection: secure cloud workloads effectively to safeguard critical applications and data
Defender for servers p1 and p2: enhance server security with microsoft defender for servers at both foundational and advanced levels
Defender for app service: protect your applications with defender for app service for a resilient and secure app environment
Defender for databases: safeguard databases against threats using microsoft defender for databases
Defender for storage: ensure the security of your storage solutions with microsoft defender for storage
Defender for containers: secure containerized environments with microsoft defender for containers for enhanced container security
Defender for key vault: safely manage and protect cryptographic keys and secrets with defender for key vault
Defender for resource manager: strengthen the security of azure resource manager deployments with defender
Defender for apis: protect apis from threats and vulnerabilities using microsoft defender for apis
Automation: streamline security processes through automation to improve efficiency and responsiveness
Integration with sentinel: seamlessly integrate with microsoft sentinel for enhanced security information and event management
Integration with defender for iot: enhance iot security by integrating microsoft defender for iot into your ecosystem
Integration with azure waf: bolster web application security with seamless integration with azure web application firewall
Integration with azure ddos protection standard: safeguard against ddos attacks with integrated protection using azure ddos protection standard
Azure lighthouse: explore the advantages of azure lighthouse for simplified management across multiple azure environments
Community: join a vibrant community to share insights, best practices, and collaborate for ongoing learning and support
Show more
Show less

Syllabus

Introduction

Welcome

Slides

Basics

Demos

FAQs

Basics - Security Operations Center (SOC)

Complexity and Cyber Security Challanges

What is a SOC?

SOC Tier Model

Cyber Security Incident Response Process

EDR, XDR, SIEM & SOAR

Blue, Red & Purple Teaming

Basics - Cyber Threat Intelligence (CTI)

What is a Threat?

Intelligence, Threat Intelligence & Cyber Threat Intelligence (CTI)

What is CTI?

Threat, Vulnerability & Risk

Threat-Informed Defense

Tactics, Techniques & Procedures (TTPs)

IOCs & IOAs

Pyramid of Pain

CTI Sources

Basics - Microsoft Azure

Cloud Computing Properties

Cloud Computing Types

Azure Global Backbone

Shared Responsibility Model

Azure Resource Hierarchy

Azure Subscription Types

Entra ID Tenants and Azure Subscriptions

Basics - Microsoft Security

Zero Trust

The Microsoft Security Cosmos

Defending Across Attack Chains

Overview on Defender for Cloud

What is Microsoft Defender for Cloud?

CSPM & CWP

Defender for Cloud RBAC

Lab Setup

Demo: Create your Azure Subscription

Demo: Install VirtualBox

Demo: Install Kali Linux

Demo: Configure Kali Keyboard Layout

Demo: Install Tor Browser in Kali

Demo: Create Resource Group

Demo: Setup Log Analytics Workspace

Demo: Enable All Plans in Defender for Cloud

Demo: Enable Defender for Cloud on Log Analytics

Demo: Create Virtual Machines

Demo: Create a Storage Account

Demo: Create a SQL Database

Demo: Create an AKS Cluster

Demo: Create an Azure Key Vault

Azure Policy

Azure Policy Overview

Azure Policy Effects

Azure Resource Manager & Azure Policy Engine

Demo: Azure Policy

Azure Arc

Log Analytics & KQL

KQL 101

Log Analytics Dedicated Cluster

CSPM - Foundational CSPM

What is CSPM?

CSPM Plans

Asset Inventory

Demo: Asset Inventory

Security Recommendations

Demo: Security Recommendations

Secure Score

Demo: Secure Score

Azure Workbooks

Demo: Azure Workbooks in Defender for Cloud

Data Exporting

Demo: Data Exporting

Remediation

Demo: Remediation

Microsoft Cloud Security Benchmark

Demo: Microsoft Cloud Security Benchmark

CSPM - Defender CSPM

Governance Management

Demo: Governance Management

Regulatory Compliance

Demo: Regulatory Compliance

Cloud Security Explorer

Demo: Cloud Security Explorer

Attack Path Analysis

Agentless Vulnerability Scanning

Agentless Discovery for Kubernetes

Container Registry Vulnerability Assessment

Data Aware Security Posture

EASM Insights in Network Exposure

DevOps Security

CWP Overview

What is CWP?

Alert Queue

Demo: Alert Queue

Demo: Create Sample Alerts

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Covers Security Operations Center (SOC) principles, which are essential for professionals involved in threat management and incident response, enhancing their understanding of security operations

Explores Azure Resource Manager deployments, which allows learners to strengthen the security of their Azure environments and manage resources more effectively

Includes integration with Microsoft Sentinel, which is useful for professionals looking to enhance their security information and event management capabilities

Requires learners to understand fundamental Azure concepts, which may necessitate prior experience or additional learning for those new to the Azure ecosystem

Teaches Azure Policy, which helps learners enforce governance policies, ensuring compliance and security across Azure resources, which is crucial for maintaining a secure cloud environment

Features demos using VirtualBox and Kali Linux, which may require learners to have specific hardware and software configurations to follow along effectively

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Microsoft Defender for Cloud with these activities:

Review Azure Fundamentals

Show steps

Solidify your understanding of core Azure concepts before diving into Defender for Cloud. This will provide a strong foundation for understanding how Defender for Cloud integrates with and protects Azure resources.

Browse courses on Azure Fundamentals

Show steps

Review the Azure Fundamentals documentation.
Complete a practice exam for Azure Fundamentals certification.
Identify key Azure services and their use cases.

Read 'Microsoft Azure Security Center'

Show steps

Gain a deeper understanding of the core concepts and functionalities of Microsoft Defender for Cloud by studying a dedicated book on the subject.

View Microsoft Azure Security Center (IT Best... on Amazon

Show steps

Read the book cover to cover.
Take notes on key concepts and functionalities.
Relate the book's content to the course modules.

Implement Azure Policy

Show steps

Reinforce your understanding of Azure Policy by implementing various policies in a test environment. This hands-on practice will solidify your knowledge and improve your ability to enforce governance and compliance.

Show steps

Create custom Azure Policies to enforce specific security configurations.
Assign policies to different scopes (subscription, resource group).
Monitor policy compliance and remediate non-compliant resources.

Four other activities

Expand to see all activities and additional details

Show all seven activities

Read 'Cloud Security Handbook'

Show steps

Broaden your understanding of cloud security principles and best practices to better contextualize the specific features and functionalities of Microsoft Defender for Cloud.

View Securing Cloud Services on Amazon

Show steps

Read the book cover to cover.
Take notes on key concepts and functionalities.
Relate the book's content to the course modules.

Design a Security Dashboard

Show steps

Apply your knowledge of Defender for Cloud and Azure Workbooks to create a custom security dashboard. This project will allow you to visualize key security metrics and identify potential threats.

Show steps

Identify key security metrics to track.
Create Azure Workbooks to visualize the metrics.
Customize the dashboard to meet specific security requirements.
Present the dashboard to peers for feedback.

Contribute to Azure Documentation

Show steps

Improve your understanding of Microsoft Defender for Cloud by contributing to the official Azure documentation. This will involve researching specific features, writing clear and concise explanations, and submitting your contributions for review.

Show steps

Identify areas in the Azure documentation that need improvement.
Research the specific features and functionalities.
Write clear and concise explanations.
Submit your contributions for review.

Automate Security Responses

Show steps

Deepen your understanding of automation by creating automated responses to security alerts in Defender for Cloud. This project will enhance your ability to streamline security processes and improve incident response times.

Show steps

Identify common security alerts that can be automated.
Create Logic Apps or Azure Functions to automate responses.
Test the automated responses in a test environment.
Document the automation process.

Career center

Learners who complete Microsoft Defender for Cloud will develop knowledge and skills that may be useful to these careers:

Reading list

We've selected two books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Microsoft Defender for Cloud.

Microsoft Azure Security Center

Save

Provides a deep dive into the capabilities of Azure Security Center, the predecessor to Microsoft Defender for Cloud. It offers valuable insights into the core functionalities and how to leverage them effectively. While some aspects may be outdated, the fundamental concepts remain relevant and provide a strong foundation. This book is useful as additional reading to expand on the course.

Microsoft Azure Security Center (IT Best Practices ...

Paperback

Securing Cloud Services

Save

Provides a broad overview of cloud security principles and best practices. It covers various aspects of cloud security, including identity and access management, data protection, and threat detection. While not specific to Microsoft Defender for Cloud, it provides valuable context and a broader understanding of the cloud security landscape. This book is useful as additional reading to expand on the course.

Securing Cloud Services

Paperback

Check price

Securing Cloud Services

Kindle Edition

Check price

Microsoft Defender for Cloud

What's inside

Learning objectives

Syllabus

Good to know

Save this course

Activities

Career center

Reading list

Share

Similar courses