Microsoft Defender for Endpoint Ninja Training: August 2021 update

Product videos

Webcast recordings

Tech Community

Docs on Microsoft

 Blogs on Microsoft

 GitHub

⤴ External

 Interactive guides

Module (ordered by roles SecOps & SecAdmin)

What's new

Security Operations Fundamentals:

Module 2. Getting started

•  Welcome to Microsoft 365 Defender!

Security Operations Fundamentals:

•  MITRE ATT&CK Techniques available in the device timeline

Security Operations Intermediate:

•  Endpoint Discovery - Navigating your way through unmanaged devices

Security Operations Intermediate:

•  Enhancing Linux antivirus with behavior monitoring capabilities

Security Operations Intermediate:

•   Updates to the evaluation lab

Security Operations Experts:

•  How to migrate advanced hunting to Microsoft 365 Defender
•  Advanced hunting: updates to threat and vulnerability management tables
  •  DeviceTvmSoftwareInventory
  •  DeviceTvmSoftwareVulnerabilities

Security Administrator Fundamentals,

Module 2. Onboarding

•  One app for VPN and mobile threat defense
•  Endpoint Discovery - Navigating your way through unmanaged devices

Security Administrator Fundamentals,

Module 4. Security configuration

•  A global switch for tamper protection
•  Secure configuration assessment for macOS and Linux now in public preview

Security Administrator Intermediate,

Module 1. Threat and vulnerability management

•  Updated Supported operating systems, platforms and capabilities 
•  Threat and vulnerability management integrates with ServiceNow VR
•  New threat and vulnerability management experiences in Microsoft 365 security
•  New APIs - create reports, automate, integrate
•  Network device discovery and vulnerability assessments
•  Device discovery
•  Vulnerability management for Linux

Security Administrator Intermediate,

Module 2. Attack surface reduction

•  Updated Learn about attack surface reduction rules
• Details about using Microsoft Endpoint Manager MEM OMA-URI to configure ASR rules
•  USB device control on Mac
•  Device control for MacOS

Security Administrator Intermediate,

Module 3. Next generation protection

•  New capabilities on Android and iOS
•  Enhancing Linux antivirus with behavior monitoring capabilities
•  Updated Microsoft Defender Antivirus compatibility

Security Administrator Intermediate,

Module 8. Migration

•  Updated the setup phase of the migration guide

Security Administrator Expert,

Module 3. Custom Integrations, APIs

•  New threat and vulnerability management API collection Export Assessment API
•  New threat and vulnerability management API collection Remediation Activity