Cybersecurity
Microsoft SC-200: MITRE ATT&CK in Microsoft Security
MITRE ATT&CK gives security teams a common vocabulary for adversary tactics and techniques. Microsoft security products use that vocabulary in…
ExamTopics reading room
All articles
Explore more technical insights and certification explainers. Page 26 of 195.
From the editorial desk
Browse the archive
Technical explainers and certification perspectives from our editorial library.
Cybersecurity
Microsoft SC-200: KQL Queries That Matter for Security Analysts
Kusto Query Language is the working language behind much of Microsoft Sentinel and Defender XDR hunting. Security analysts do not…
Cybersecurity
Microsoft SC-200: Incident Investigation Across Defender XDR
Microsoft Defender XDR is designed to correlate signals from endpoints, identities, email and collaboration, cloud apps, and integrated Microsoft Sentinel…
Cybersecurity
Microsoft SC-200: Identity Threats with Defender for Identity
Identity attacks often use legitimate protocols, valid credentials, and ordinary administrative tools. That makes them difficult to distinguish from normal…
AI & Data
Microsoft SC-200: Building Microsoft Sentinel Analytics Rules
Microsoft Sentinel analytics rules are not simply saved KQL queries. A production detection combines a security hypothesis, dependable data, query…
Cybersecurity
Microsoft SC-200: Automating SOC Workflows with Sentinel Playbooks
Microsoft Sentinel playbooks turn repeatable incident-response procedures into Azure Logic Apps workflows. They can enrich incidents, notify teams, create tickets,…
Cybersecurity
Microsoft SC-100: Zero Trust Architecture Across Microsoft Cloud
Zero Trust is a security strategy, not a product bundle. Microsoft describes it through three principles: verify explicitly, use least…
Cloud Computing
Microsoft SC-100: Defender for Cloud Posture Management
Cloud posture management is the discipline of continuously finding configuration, exposure, permission, and vulnerability conditions that make compromise more likely.…
Technology Fundamentals
Microsoft SC-100: Privileged Access Design with Entra PIM
Privileged access is an architectural problem before it becomes a configuration problem. Microsoft Entra Privileged Identity Management can make role…