Microsoft 365 Defender Ninja Training: January 2021 update

[Heike Ritter]

To usher in the new year, we are happy to announce a change in the blog name to Microsoft 365 Defender Ninja Training to coincide with the product name change.

Also, in addition to several updates to Microsoft 365 Defender Ninja training, we've included a dedicated section focusing on the Solorigate cyberattack to help you defend your environment against this and future supply chain attacks.

If you want to refresh your knowledge and get updated, here is what has been added since the last update:

Legend:

Product videos	Webcast recordings	Tech Community
Docs on Microsoft	Blogs on Microsoft	GitHub
⤴ External	Interactive guides

Module	What's new
Security Operations Fundamentals Module 1. Technical overview	New value for Microsoft ​Defender for Identity  New value for Microsoft Defender for Office 365
Security Operations Fundamentals Module 2. Getting started	Provide your feedback
Security Operations Fundamentals Module 3. Investigation – Incident	Improved incident queue  Get email notifications on new incidents  Classification of incidents & alerts
Security Operations Intermediate Module 2. Investigation	Investigation improvements for Microsoft Defender for Office 365
Security Operations Intermediate: Module 3. Advanced hunting	Hunt across cloud app activities  Use additional email data in your hunting queries  Use Azure Active Directory audit log data in advanced hunting  Hunt for Azure Active Directory sign-in events

The following is not part of the Ninja training, but definitely worth a read:

Solorigate

Using Microsoft 365 Defender to protect against Solorigate - Microsoft Security  SolarWinds Post-Compromise Hunting with Azure Sentinel  Advice for incident responders on recovery from systemic identity compromises   Latest Threat Intelligence (15 December, 2020) - FireEye and SolarWinds Events - Microsoft Tech Comm...  Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Mic...  A moment of reckoning: the need for a strong and global cybersecurity response  Ensuring customers are protected from Solorigate  Important steps for customers to protect themselves from recent nation-state cyberattacks Customer Guidance on Recent Nation-State Cyber Attacks  Guarding against supply chain attacks—Part 1: The big picture New Threat analytics report shares the latest intelligence on recent nation-state cyber attacks