November 2025 Security Curriculum Updates Now Available

The November 2025 Microsoft Security Curriculum Newsletter provides important updates across SC‑200, SC‑5001, SC‑5006, and MD‑4011.

Key Highlights

Unified Security Operations Enhancements

• Workbook editing for Microsoft Sentinel is now available directly in the Defender portal.
• Unified RBAC distribution profiles are generally available.
• New capabilities include incident task assignment, blast‑radius analysis, and expanded graph‑based hunting with updated schema tables.

SC‑200 Updates

• Lab environment deployment now averages approximately 44 minutes for modules 6–10. Trainers should plan their sessions accordingly.
• New Threat Intelligence Briefing Agent (Preview) and expanded identity investigation data through the IdentityAccountInfo table.
• Unified RBAC alignment across Defender XDR and Defender for Cloud.

SC‑5006 Updates

• Security Copilot is now included with Microsoft 365 E5 at no additional cost.
• Updated agentic defense features and guidance on Security Compute Unit allocations.

Additional Resources

• Newly released Microsoft Sentinel Video Library.

Course Preparation Resources

SC-200 study guide

SC-200 exam prep video

SC-200 practice assessment

One goal, many roles: Microsoft Security Copilot use cases for all

Security Partner Growth: Managed Services with Defender & Sentinel

Innovating security operations with Microsoft Sentinel