Defend Against Cyberthreats with Microsoft Defender XDR — Lesson 2: Threat Detection and Investigation

Topics Covered

• alert triage
• incident correlation
• advanced hunting concepts
• attack-story analysis

Practical Activity

• Document the scenario, assumptions, stakeholders, and expected business or technical outcome.
• Complete a guided configuration, analysis, or design exercise aligned to the lesson topics.
• Record validation evidence, risks, dependencies, and corrective actions.
• Summarize the result in a reusable implementation or operating note.

Validation Checklist

• Requirements and assumptions are clearly documented.
• The selected Microsoft features or services match the scenario.
• Security, governance, and operational impacts are considered.
• The final result includes evidence and actionable next steps.

Lesson Outcome

Learners can explain and apply threat detection and investigation within a realistic threat defense with Microsoft Defender XDR scenario.