Microsoft Defender for Office 365

Introduction

• Secure your organization with Microsoft Defender
• What you should know
• Course lab setup
• Licensing
• Accessing the Defender Portal

1. Preset Threat Protection Policies

• Preset security policies and rules
• Exchange Online Policies (EOP) anti-spam policies
• Configuration analyzer
• Allow and Block lists
• Scenario: What would you do?

2. Custom Threat Protection Policies

• Anti-phishing
• Safe Attachments
• Safe Links
• Anti-spam
• Anti-malware
• Alert policies
• Scenario: What would you do?

3. Cloud App Policies

• Overview of Cloud App Protection in Defender for Office 365
• Cloud App Catalog
• Create Cloud App policies
• Scenario: What would you do?

4. Reports

• Utilize message trace to track an email
• Analyze the health of the system
• Configure permissions and roles
• Incidents and alerts
• Scenario: What would you do?

5. Threat Investigation and Response Capabilities

• Guided threat hunting
• Schema alerts
• Learning Kusto Query Language (KQL)
• Scenario: What would you do?

Conclusion

• Next steps