tark.ee
tark.ee

MOC-40551 Microsoft Security Workshop: Enterprise Security Fundamentals

This 1-day Instructor-led security workshop provides insight into security practices to improve the security posture of an organization. The workshop examines the concept of Red team – Blue team security professionals, where one group of security pros–the red team–attacks some part or parts of a company’s security infrastructure, and an opposing group–the blue team–defends against the attack. Both teams work to strengthen a company’s defenses. Since the goal of the two teams is to help the business attain a higher level of security, the security industry is calling this function, the Purple team.

Nordic Koolitus
Description
This workshop is part of a larger series of Workshops offered by Microsoft on the practice of Security. While it is not required that you have completed any of the other courses in the Security Workshop series before taking this workshop, it is highly recommended that you start with this workshop in the series, Microsoft Security Workshop: Enterprise Security Fundamentals.
Goal
This 1-day workshop is intended for IT Professionals that require a deeper understanding of Windows Security that wish to increase their knowledge level. This course also provides background in cyber-security prior to taking the other security courses in this track.
Who it is for
In addition to their professional experience, students who take this training should already have the following technical knowledge: The current cyber-security ecosystem, Analysis of hacks on computers and networks, Basic Risk Management
Programme
  • Module 1: Understanding the cyber-security landscape
    • In this module, you will learn about the current cybersecurity landscape and learn how adopting the assume compromise philosophy, you can you restrict an attacker’s ability to move laterally between information systems and to restrict their ability to escalate privileges within those systems. The current cyber-security landscape is vast and likely impossible for any one individual to comprehend in its entirety. There are, however, several aspects of that landscape to which those interested in the fundamentals of enterprise security should pay attention.
  • Module 2: Red Team: Penetration, Lateral Movement, Escalation, and Exfiltration
    • Red team versus blue team exercises involve the simulation of an attack against an organization’s information system. The red team simulates and, in some cases, performs proof of concept steps taken in the attack against the organization’s IT systems. The blue team simulates the response to that attack. This adversarial approach not only allows for the identification of security vulnerabilities in the way that the organization’s IT systems are configured, but also allows members of the organization’s information systems staff to learn how to detect and respond to attacks. In this module you will learn the Practice Red team versus Blue team approach to detecting and responding to security threats.
  • Module 3: Blue Team Detection, Investigation, Response, and Mitigation
    • In this module you will learn about the Blue Team roles and goals in the attack exercises. You will learn the structure of an attack against an objective (Kill Chain) and the ways limiting how an attacker can compromise unprivileged accounts. You will also learn the methods used to restrict lateral movement that prevent attackers from using a compromised system to attack other systems and how telemetry monitoring is used to detect attacks.
  • Module 4: Organizational Preparations
    • There are several ongoing preparations that an organization can take to improve their overall approach to information security. In this module, we will take a closer look at some of them. You will learn about a conceptual model for thinking about the security of information and how to approach information security and to prepare properly including ensuring your organization has a deliberate approach to information security.
Skills you will gain
After completing this course, students will be able to: describe the current cybersecurity landscape; describe the assume compromise philosophy; identify factors that contribute to the cost of a breach; distinguish between responsibilities of red teams and blue teams; identify typical objectives of cyber attackers; describe a kill chain carried out by read teams; describe the role, goals, and kill chain activities of the blue team in red team exercises; describe the ways limiting how an attacker can compromise unprivileged accounts; describe the methods used to restrict lateral movement; describe how telemetry monitoring is used to detect attacks; explain the concept of Confidentiality, Integrity, and Availability (CIA) triad; describe the primary activities that should be included in organization preparations; identify the main principles of developing and maintaining policies.
Additional information
More information: https://www.microsoft.com/en-us/learning/course.aspx?cid=40551. Koolitushind sisaldab: klassikoolitust; Microsofti ametlikke õppematerjale; koolitaja konsultatsiooni õpitud teemade kohta e-posti teel pärast koolitust; tunnistust. Lisaväärtusena saad: vajadusel tasuta korduskoolituse kui tunned, et mõni oskus vajab täiendamist või pidid endast mittesõltuvatel põhjustel koolituse katkestama; sooje jooke koos küpsistega; lõunasööki igal koolituspäeval
✨
Vajan seda oma tiimile
Aitame koostada päringu
›

This course last ran in June 2020. We do not know yet whether or when it will run again — that is why it is still here. Ask us if you are interested.

Sarnased koolitused, mis praegu toimuvad

Administreerimine

Turbetehnoloogiate rakendamine ja turvaseire ettevõttes (SC-200 Defend against cyberthreats with Microsoft’s security operations platform)

Osalejad saavad teadmised kuidas Microsofti tehnoloogiate baasil kaitsta oma ettevõtte IT-taristut küberohtude eest

18.01 – 20.01 · Aia 7 või videokonverentsi keskkonnas MS Teams · 27 ak. tundi

Janek Saar

Janek Saar

BCS Koolitus

BCS Koolitus

1045€+kmVaata

Administreerimine

Microsoft 365 Administrator (MS-102T00-A)

This course covers the following key elements of Microsoft 365 administration: Microsoft 365 tenant management, Microsoft 365 identity synchronization, and Microsoft 365 security and compliance.

23.11 – 26.11 · Aia 7 või videokonverentsi keskkonnas MS Teams · 32 ak. tundi

Andres Liitmaa

Andres Liitmaa

BCS Koolitus

BCS Koolitus

1390€+kmVaata

Arvutiõpe, IT koolitus

Cybersecurity Program (Based on ISACA ITCA and Microsoft SC-900 Materials)

The four-month training program includes both independent study and online seminars led by an instructor.

05.02 – 28.05 · Veebikoolitus · 164 ak. tundi

Janek Saar

Janek Saar

BCS Koolitus

BCS Koolitus

1590€+kmVaata

Administreerimine

Administering Microsoft Endpoint Configuration Manager (55348AC )

This five-day course describes how to use Configuration Manager and its associated site systems to efficiently manage network resources. In this five-day course, you will learn day-to-day management tasks, including how to manage applications, client health, hardware and software inventory, operating system deployment, and software updates by using Configuration Manager.

08.02 – 22.09 · Lõõtsa 5 · 40 akadeemilist tundi (5 päeva)

Meelis Nigols

Meelis Nigols

Nordic Koolitus

Nordic Koolitus

1090€+kmVaata

Tell me when this course runs again

This course is not running at the moment. Leave your contact details and we will let you know when it, or a similar course, is back in the calendar.

Notify me withinmonths.
✨

Otsid midagi muud?

Aitame leida sarnase koolituse või koostada tiimile eraldi pakkumise — vestle meiega.

Ask when it runs ↓