SC-5001: Configure SIEM security operations using Microsoft Sentinel
Last Updated: 29-06-2026
The SC-5001: Configure SIEM Security Operations using Microsoft Sentinel course equips you with the essential skills to effectively configure and manage a Security Information and Event Management (SIEM) solution using Microsoft Sentinel. This course is designed for security professionals, administrators, and analysts who are looking to enhance their organization’s security operations with SIEM capabilities powered by Azure Sentinel.
Secure Your Investment: Our No Questions Asked Refund Policy.
Enterprise Grade LMS: Perform real labs, don't just watch videos and read pdf.
Industry Equivalent Labs: Develop real world technical skills (180 Days Access).
100% Live Sessions: Stay focused and upskill today, not "someday."
Optimize Sentinel’s performance by managing retention policies and setting up cost-effective data collection strategies.
Understand the integration of Sentinel with other Microsoft security solutions like Microsoft Defender and Azure Security Center for comprehensive threat protection.
Target Audience
This course is ideal for:
Security engineers and security analysts responsible for implementing and managing SIEM systems in an enterprise environment.
SOC analysts who want to streamline threat detection and response using Microsoft Sentinel.
IT professionals and cloud administrators looking to enhance their security monitoring practices using Azure Sentinel.
Security operations managers seeking to build or refine their SIEM strategy using Microsoft Sentinel.
Microsoft 365 administrators and Azure administrators who want to integrate Sentinel into their organization's existing security operations.
Security consultants who need expertise in configuring and managing SIEM tools for enterprise clients.
Course Modules
1. Create and manage Microsoft Sentinel workspaces
Introduction
Plan for the Microsoft Sentinel workspace
Create a Microsoft Sentinel workspace
Manage workspaces across tenants using Azure Lighthouse
Understand Microsoft Sentinel permissions and roles
Manage Microsoft Sentinel settings
Configure logs
2. Connect Microsoft services to Microsoft Sentinel
Introduction
Plan for Microsoft services connectors
Connect the Microsoft 365 connector
Connect the Microsoft Entra connector
Connect the Microsoft Entra ID Protection connector
Connect the Azure Activity connector
3. Connect Windows hosts to Microsoft Sentinel
Introduction
Plan for Windows hosts security events connector
Connect using the Windows Security Events via AMA Connector
Connect using the Security Events via Legacy Agent Connector
Collect Sysmon event logs
4. Threat detection with Microsoft Sentinel analytics
Introduction
Exercise - Detect threats with Microsoft Sentinel analytics (Part 1)
What is Microsoft Sentinel Analytics?
Types of analytics rules
Create an analytics rule from templates
Create an analytics rule from wizard
Manage analytics rules
Exercise - Detect threats with Microsoft Sentinel analytics (Part 2)
5. Automation in Microsoft Sentinel
Introduction
Understand automation options
Create automation rules
6. Configure SIEM security operations using Microsoft Sentinel
Introduction
Exercise - Configure SIEM operations using Microsoft Sentinel
Exercise - Install Microsoft Sentinel Content Hub solutions and data connectors
Exercise - Configure a data connector Data Collection Rule
Exercise - Perform a simulated attack to validate the Analytic and Automation rules
Exercise - Connect Microsoft Sentinel to Microsoft Defender XDR
Trustpilot
What Our Learners Are Saying
The training, courseware, and lab experience were insightful and valuable. Keep up the great work and
learning experience!
Nitish A. Anand – Accenture
Course: SC-200: Microsoft Security Operations Analyst
Date: 15th Jan 2025
The instructor was professional and very content.
Justine Daudi Mlimbilah – Bank of Africa, Tanzania
Course: MD-102: Microsoft 365 Endpoint Administrator
Date: 20th Dec 2024
The instructor was so knowledgeable & humble. Rare to find someone so confident but so down to earth these
days. So appreciative to him.”
Mohd. Hassan – Ministry of Finance, UAE
Course: AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
Date: 31st July 2024
Instructor is experienced and knowledgeable in guiding.
Dharshini Mahalaxmi – Dr. MGR Education and Research Institute, Chennai, India
Course: SC-300: Microsoft Identity and Access Administrator
Date: 4th May 2024
Course Prerequisites
Learning Objectives
Target Audience
Course Modules