Threat Detection: Planning for a Secure Enterprise

Module 1 Introduction to threat detection as part of the defense in-depth strategy

• An overview of the modern cyber threat landscape
• Integrating pre-breach and post-breach approaches to mitigate cyber threats
• Comparing signature-based and behavioral/heuristic detection methods
• Combating threat persistence

Module 2 Detecting threats in on-premises environments

• Windows Defender Advanced Threat Protection
• Microsoft Advanced Threat Analytics
• Microsoft Enterprise Threat Detection
• Microsoft Security Risk Detection
• Antimalware Scan Interface
• Logging and Auditing
• Threat detection tools

Module 3 Detecting threats in hybrid and cloud environments

• Office 365 Advanced Threat Protection
• Office 365 Cloud App Security and Microsoft Cloud App Security
• Azure Advanced Threat Detection
• Azure Active Directory Identity Protection
• Azure Active Directory Identity Threat Detection
• Microsoft Operations Management Suite (OMS)
• Azure Security Center
• Advanced Threat Detection Features - Other Azure Services
• Third-party ATD capabilities through Azure Marketplace
• Azure Logging and Auditing
• Microsoft 365

Module 4 Analyzing threat detection solutions in action

• Detecting persistent threats by using Windows Defender Advanced Threat Protection and Advanced Threat Analytics
• Enterprise Threat Detection behavioral monitoring