UDEMY.Microsoft.Defender.for.Endpoint.course.with.hands.on.sims.2026.BOOKWARE-MiMiR

Section

eBooks/Audiobooks

Group

MiMiR

Size

4,21 GB

Files

33

Date

2026-02-27

NFO

Mímir, Keeper of the Well of Wisdom
  
  Microsoft Defender for Endpoint course with hands on sims

  https://www.udemy.com/course/microsoft-defender-for-endpoint-
  course-with-hands-on-sims/

  Year         : 2026
  Language     : English
  Level        : All Levels
  Category     : IT & Software
  Subcategory  : Network & Security
  Duration     : 8h 7m
  Lectures     : 74
  Rating       : 4.7/5 (126 reviews)
  Students     : 958

  INSTRUCTOR(S)


  HEADLINE
    Learn how to expertly administer Microsoft Defender for
    Endpoint with hands on experience!


  WHAT YOU'LL LEARN
  * Learn the concepts and perform hands on activities needed to
    master Microsoft Defender for Endpoint
  * Gain a tremendous amount of knowledge involving Microsoft
    Defender for Endpoint
  * Learn using hands on simulations on how Microsoft Defender
    for
    Endpoint is administered!
  * Learn how to set up your own test lab for practicing the
    concepts!


  REQUIREMENTS
  * Willingness to put in the time and practice the steps shown
    in
    the course


  WHO IS THIS COURSE FOR
  * IT people interested in learning a tremendous amount about
    Microsoft Defender for Endpoint


  DESCRIPTION
  We really hope you'll agree, this training is way more than
    the
  average course on Udemy! Have access to the following:
    Training
  from an instructor of over 20 years who has trained thousands
    of
  people and also a Microsoft Certified Trainer Lecture that
  explains the concepts in an easy to learn method for someone
  that is just starting out with this material Instructor led
  hands on and simulations to practice that can be followed even
  if you have little to no experience TOPICS
  COVERED INCLUDING HANDS ON LECTURE AND PRACTICE TUTORIALS:
  Introduction Welcome to the course! Understanding the
    Microsoft
  365 and Azure Environment A Solid Foundation of Active
    Directory
  Domains A Solid Foundation of RAS, DMZ, and Virtualization A
  Solid Foundation of the Microsoft Cloud Services IMPORTANT
    Using
  Assignments in the course Questions for John Christopher
  Certificate of Completion Setting up for hands on DONT SKIP:
  Before beginning your account setup Creating a trial Microsoft
  365/Azure Account Using a Hyper-V virtual machine or an Azure
  virtual machine Setting up an Azure virtual machine for hands
    on
  HYPER-V: Getting Hyper-V Installed on Windows HYPER-V:
    Creating
  a Virtual Switch in Hyper-V HYPER-V: Downloading the Windows
    11
  ISO HYPER-V: Installing a Windows 11 virtual machine Device
  management support with Microsoft Entra Overview of device
  management of Microsoft device managements concepts
    Registering
  devices vs joining devices with Microsoft Entra Configuring
  Microsoft Entra for device management Joining our virtual
  machine to Microsoft Entra Introduction to Endpoint Security &
  Microsoft Defender for Endpoint What is Endpoint Security?
    High
  level overview of Microsoft Defender for Endpoint Licensing
    and
  Plan Comparison (P1 vs P2) Microsoft 365 Defender Portal Tour
  How Defender for Endpoint relates to Microsoft Intune
  Introduction to Microsoft Intune for device management Setting
  Up Defender for Endpoint Prerequisites and Supported Operating
  Systems Creating a Microsoft Defender Admin role for
    permissions
  Onboarding a Windows device to Defender for Endpoint Mass
  automatic onboarding with Microsoft Intune Verifying Windows
  devices have been onboarded Implementing device discovery
  Defender for Endpoint Vulnerability Management What are Common
  Vulnerabilities and Exposures (CVEs)? Inspecting
    vulnerabilities
  on a specific device Using the vulnerability management
  dashboard for high level overview Improving security with the
  help of vulnerability recommendations Utilizing remediation
  within vulnerability management Creating and managing Device
  Groups for Defender for Endpoint Configuration and Policy
  Management Hardening endpoint security by using Endpoint
  Security Policies Attack Surface Reduction (ASR) Rules What is
  Next-Gen Protection with Microsoft Defender for Endpoint?
  Understanding the local anti-virus settings on Windows 11
  Implementing Next-Gen Protection for devices Understanding the
  local Defender Firewall settings on Windows 11 Implementing
  Firewall Rule Policies using Defender for Endpoint Using
  Security Baselines in securing our devices Utilizing Microsoft
  Purview Endpoint DLP (Data Loss Prevention) Understanding the
  concepts of DLP (Data Loss Prevention) Considering device
  requirements before using Endpoint DLP Settings for
    configuring
  Endpoint DLP Configuring DLP policies with advanced rules
  Enabling just-in-time (JIT) protection How to monitor for
  endpoint activities Incident Response and Investigation What
    is
  Automated Investigation and Remediation (AIR)? Implementing
  Automated Investigation and Remediation (AIR) within device
  groups Triggering incidents using a client device for testing
  Investigating incidents generated by Defender managed devices
  Viewing alerts generated by Defender managed devices Managing
  and classifying detected alerts Kusto Query Language (KQL)
    What
  is Kusto Query Language (KQL)? Using the Microsoft KQL Demo
  environment, downloading resource materials and AI Basic KQL
  syntax for searching for information Summarizing KQL results
    and
  filtering based on time ranges Controlling KQL data displayed
  based on columns, amounts and characters Using KQL variables
    and
  combining output data Running Threat Hunting Queries with
  Advanced Hunting (KQL) Utilizing Microsoft's Sentinel and
  Defender repository of premade KQL Queries


  COURSE CONTENT

  Chapter 1: Introduction
    1. Welcome to the course!
    2. Understanding the Microsoft 365 and Azure Environment
    3. A Solid Foundation of Active Directory Domains
    4. A Solid Foundation of RAS, DMZ, and Virtualization
    5. A Solid Foundation of the Microsoft Cloud Services
    6. DO NOT SKIP: Portals renamed!
    7. DON'T SKIP Using Assignments/Simulations in the course
    8. Questions for John Christopher
    9. Certificate of Completion

  Chapter 2: Setting up for hands on
    10. DONT SKIP: Before beginning your account setup
    11. Creating a trial Microsoft 365/Azure Account
    12. Disable Security Defaults in Entra ID before proceeding
    13. Using a Hyper-V virtual machine or an Azure virtual
        machine
    14. Setting up an Azure virtual machine for hands on
    15. HYPER-V: Getting Hyper-V Installed on Windows
    16. HYPER-V: Creating a Virtual Switch in Hyper-V
    17. HYPER-V: Disable large send offload version 2
    18. HYPER-V: Downloading the Windows 11 ISO
    19. HYPER-V: Installing a Windows 11 virtual machine

  Chapter 3: Device management support with Microsoft Entra
    20. Overview of device management of Microsoft device
        managements concepts
    21. Registering devices vs joining devices with Microsoft
        Entra
    22. Configuring Microsoft Entra for device management
    23. HYPER-V VM only: Joining our virtual machine to
        Microsoft Entra
    24. DONT SKIP: Redoing simulations in the course

  Chapter 4: Introduction to Endpoint Security & Microsoft
    Defender for Endpoint
    25. What is Endpoint Security?
    26. High level overview of Microsoft Defender for Endpoint
    27. Licensing and Plan Comparison (P1 vs P2)
    28. Microsoft 365 Defender Portal Tour
    29. How Defender for Endpoint relates to Microsoft Intune
    30. Introduction to Microsoft Intune for device management

  Chapter 5: Setting Up Defender for Endpoint
    31. Prerequisites and Supported Operating Systems
    32. Creating a Microsoft Defender Admin role for permissions
    33. Onboarding a Windows device to Defender for Endpoint
    34. Mass automatic onboarding with Microsoft Intune
    35. Verifying Windows devices have been onboarded
    36. Implementing device discovery

  Chapter 6: Defender for Endpoint Vulnerability Management
    37. What are Common Vulnerabilities and Exposures (CVEs)?
    38. Inspecting vulnerabilities on a specific device
    39. Using the vulnerability management dashboard for high
        level overview
    40. Improving security with the help of vulnerability
        recommendations
    41. Utilizing remediation within vulnerability management
    42. Creating and managing Device Groups for Defender for
        Endpoint

  Chapter 7: Configuration and Policy Management
    43. Hardening endpoint security by using Endpoint Security
        Policies
    44. Attack Surface Reduction (ASR) Rules
    45. What is Next-Gen Protection with Microsoft Defender for
        Endpoint?
    46. Understanding the local anti-virus settings on Windows
        11
    47. Implementing Next-Gen Protection for devices
    48. Understanding the local Defender Firewall settings on
        Windows 11
    49. Implementing Firewall Rule Policies using Defender for
        Endpoint
    50. Using Security Baselines in securing our devices

  Chapter 8: Utilizing Microsoft Purview Endpoint DLP (Data Loss
    Prevention)
    51. Understanding the concepts of DLP (Data Loss Prevention)
    52. Considering device requirements before using Endpoint
        DLP
    53. Settings for configuring Endpoint DLP
    54. Configuring DLP policies with advanced rules
    55. Enabling just-in-time (JIT) protection
    56. How to monitor for endpoint activities

  Chapter 9: Incident Response and Investigation
    57. What is Automated Investigation and Remediation (AIR)?
    58. Implementing Automated Investigation and Remediation
        (AIR) within device groups
    59. Triggering incidents using a client device for testing
    60. Investigating incidents generated by Defender managed
        devices
    61. Viewing alerts generated by Defender managed devices
    62. Managing and classifying detected alerts

  Chapter 10: Kusto Query Language (KQL)
    63. What is Kusto Query Language (KQL)?
    64. Using the Microsoft KQL Demo environment, downloading
        resource materials and AI
    65. Basic KQL syntax for searching for information
    66. Summarizing KQL results and filtering based on time
        ranges
    67. Controlling KQL data displayed based on columns, amounts
        and characters
    68. Using KQL variables and combining output data
    69. Running Threat Hunting Queries with Advanced Hunting
        (KQL)
    70. Utilizing Microsoft's Sentinel and Defender repository
        of premade KQL Queries
    71. Removing our Azure virtual machine

  Chapter 11: Role Plays (Optional - Not needed to complete
    course and get certificate)
    72. How Udemy Role Plays work

  Chapter 12: FINAL - Where do I go from here?
    73. Getting your Udemy certificate for this course
    74. BONUS Lecture


  DATES
  Published    : 2025-06-09
  Last Updated : 2026-02-04

If you fear the truth, don?t come to my well.

Files