~/azure-sc-200 · Perform threat hunting ▊
← Microsoft Certified: Security Operations Analyst Associate
AZURE · objective · 22% of the exam
Perform threat hunting — Microsoft Certified: Security Operations Analyst Associate
The official AZURE documentation our Perform threat hunting practice questions are cited to. Review the primary sources, then practise.
Official references for this objective
-
Microsoft — Updates to MSTICPy and Jupyter Notebooks in Azure Sentinel | Microsoft Learn
Try the EventTimeLine and ProcessTree notebooks
-
Microsoft — Advanced Hunting & Data visualization in Microsoft 365 Defender | Microsoft Learn
how to use this powerful feature to track attack surface reduction rules and web protection activities
-
Microsoft — Microsoft Secure 2023 Ep01: Threat hunting with Microsoft Sentinel | Microsoft Learn
Observe threats over time with livestream.