SC-5004: Defend against cyberthreats with Microsoft Defender XDR
Upcoming dates
Click a date to book online.
| Location | Oct 26 | Nov 26 |
|---|---|---|
| Auckland | ||
| Wellington | ||
| Virtual |
Overview
Implement the Microsoft Defender for Endpoint environment to manage devices, perform investigations on endpoints, manage incidents in Defender XDR, and use Advanced Hunting with Kusto Query Language (KQL) to detect unique threats.
Who should attend
Security Operations Analysts
Prerequisites
- Experience using the Microsoft Defender portal
- Basic understanding of Microsoft Defender for Endpoint
- Basic understanding of Microsoft Sentinel
- Experience using Kusto Query Language (KQL) in Microsoft Sentinel
- Access to a Microsoft 365 E5 Tenant with a Microsoft Defender for Endpoint P2 license to perform the exercises
What you'll learn
After completing this course, students will be able to:
- Configure a Defender XDR environment
- Manage devices by using Defender for Endpoint
- Use Defender XDR to manage incidents
- Manage investigations on an endpoint
- Perform Advanced Hunting with KQL to detect unique threat
Course content
- Mitigate incidents using Microsoft Defender
- Deploy the Microsoft Defender for Endpoint environment
- Configure for alerts and detections in Microsoft Defender for Endpoint
- Configure and manage automation using Microsoft Defender for Endpoint
- Perform device investigations in Microsoft Defender for Endpoint
- Defend against Cyberthreats with Microsoft Defender XDR lab exercises
Common questions
When does SC-5004: Defend against cyberthreats with Microsoft Defender XDR next run?
The next date is Thu, 15 Oct 2026, and there are 2 further dates scheduled. Delivered ACE Training Auckland, ACE Training Wellington, live online. Every date and its format is listed on this page.
How much does SC-5004: Defend against cyberthreats with Microsoft Defender XDR cost?
From $895 + GST per person. Pricing can differ by date and location, so check the option you want before booking.
Can we pay by invoice instead of by card?
Yes. Choose 'Pay by invoice' when you book and we'll hold your place and send the invoice to your accounts address, with a purchase order number on it if you need one. You can also pay by card at the time of booking if that's easier.
Do I need any prior experience?
Experience using the Microsoft Defender portal Basic understanding of Microsoft Defender for Endpoint Basic understanding of Microsoft Sentinel Experience using Kusto Query Language (KQL) in Microsoft Sentinel Access to a Microsoft 365 E5 Tenant with a Microsoft Defender for Endpoint P2 license to perform the exercises
Can I attend online, or does it have to be in a classroom?
Both. Some dates run live online and others in-class — each date on this page shows its format, so pick whichever suits.
Can you run this course for my team?
Yes. Any ACE course can be delivered in-house at your workplace and tailored to your team's tools and goals — quote course code SC5004 when you enquire.