Detect and respond to threats
Use the Microsoft Defender portal: incidents and alerts, email and collaboration protection, endpoints, threat hunting and Secure Score.
22 lessons5 modules about 2 hours IT & security admins Certificate
Part of:Microsoft 365 AdministratorMicrosoft Security & Compliance
22 hands-on lessons
Earn your Microsoft Defender certificate
Finish all 22 lessons, then pass the 20-question final exam (80% to pass). Your certificate has a public link anyone can verify.
The unified portal, incidents and alerts, triage, quarantine and Secure Score.
One portal for Defender XDR, and where each workload lives.
How alerts become incidents, and how to read an incident.
Take ownership, track status, classify and resolve.
Preview, check, release or delete messages held by protection policies.
Measure your security posture and work through recommended actions.
Defender for Office 365 and Exchange Online Protection policies, preset policies and submissions.
Protect key people and domains from look-alike senders.
Spam and bulk actions, outbound limits, forwarding and risky attachments.
Time-of-click URL checks and attachment detonation.
Microsoft-managed Standard and Strict protection, and which policy wins.
User reporting, sending messages to Microsoft, and blocking what you find.
Defender for Endpoint: onboarding, device response, automation and attack surface reduction.
Connect devices to Defender for Endpoint and group them.
Isolate, scan, collect evidence and restrict apps.
Let Defender investigate and fix, and approve or undo its actions.
Block the behaviors malware relies on, without breaking business apps.
Advanced hunting with KQL, and turning queries into custom detections.
Threat Explorer, threat analytics, attack simulation, identity and cloud app protection, and access control.
Find malicious email that reached users, and clean it up.
Microsoft research on active threats, matched to your environment.
Run realistic phishing simulations and train the people who fall for them.
On-premises identity threats, shadow IT and cloud app control.
Least-privilege roles, tamper protection and notifications.
22 hands-on lessons
Earn your Microsoft Defender certificate
Finish all 22 lessons, then pass the 20-question final exam (80% to pass). Your certificate has a public link anyone can verify.
The unified portal, incidents and alerts, triage, quarantine and Secure Score.
One portal for Defender XDR, and where each workload lives.
How alerts become incidents, and how to read an incident.
Take ownership, track status, classify and resolve.
Preview, check, release or delete messages held by protection policies.
Measure your security posture and work through recommended actions.
Defender for Office 365 and Exchange Online Protection policies, preset policies and submissions.
Protect key people and domains from look-alike senders.
Spam and bulk actions, outbound limits, forwarding and risky attachments.
Time-of-click URL checks and attachment detonation.
Microsoft-managed Standard and Strict protection, and which policy wins.
User reporting, sending messages to Microsoft, and blocking what you find.
Defender for Endpoint: onboarding, device response, automation and attack surface reduction.
Connect devices to Defender for Endpoint and group them.
Isolate, scan, collect evidence and restrict apps.
Let Defender investigate and fix, and approve or undo its actions.
Block the behaviors malware relies on, without breaking business apps.
Advanced hunting with KQL, and turning queries into custom detections.
Threat Explorer, threat analytics, attack simulation, identity and cloud app protection, and access control.
Find malicious email that reached users, and clean it up.
Microsoft research on active threats, matched to your environment.
Run realistic phishing simulations and train the people who fall for them.
On-premises identity threats, shadow IT and cloud app control.
Least-privilege roles, tamper protection and notifications.
Unlock every lesson, exam and certificate
The Basics module is free. IT Pro unlocks the intermediate and advanced lessons, from $12.42/month.