Detect, Respond and Recover Office 365 Security Incident

Jetzt auch über ETC erhältlich: Microsoft Premier Workshops buchen!


This offering provides an education offering which helps our customers to learn and practice the actions that they need to take in order to detect, respond and recover when they have a security incident in their O365 tenant.

Objectives:

• Learn basic concepts about the different solutions available in Office 365 to detect, respond and recover to a security incident
• Detect threats with O365 tools(auditing, message tracking, default reports)/ATP/MCAS
• Learn how to use the tools available in order to take the appropriate actions 

Office 365 Administrators

Willing to learn how to detect, respond and recover when there is a security incident in their O365 tenant 

User Compromised with malicious URL

• Campaigns
• Threat Analytics
• Threat Explorer

User compromised with malicious App

• Applications in Azure Active Directory
• Manage Consent in Azure Active Directory
• Detect malicious applications and activities
• Investigate App Consent Grant
• Respond to illicit grant and applications

User compromised with malicious File

• Phishing and Malware Campaigns
• Advanced Auditing
• Advanced Hunting for data compromise