M55610A – Planning and Implementing Microsoft Sentinel (SIEM & SOAR)

Course Description

SkillDynamo’s M55610A – Planning and Implementing Microsoft Sentinel (SIEM & SOAR) course develops practical, role-relevant capability in planning and implementing Microsoft Sentinel data collection, analytics, hunting, incidents, automation, security operations, and governance. The learning path progresses from planning and essential concepts to implementation, validation, troubleshooting, and operational use.

Learners work through realistic scenarios, instructor-led demonstrations, applied exercises, and evidence-based reviews. Each topic is connected to workplace responsibilities, common risks, quality controls, and measurable outcomes.

The course helps professionals build dependable skills, explain their decisions, identify failure points, and create an actionable improvement plan that can be applied to future projects.

What You Will Learn

• Plan workspaces, retention, access, data residency, and operational ownership
• Connect Microsoft, Azure, Windows, Linux, network, cloud, and custom data sources
• Use data connectors, agents, transformations, normalization, and data-quality checks
• Create scheduled, near-real-time, anomaly, and Microsoft security analytics rules
• Configure entities, incidents, grouping, suppression, watchlists, and investigation
• Use KQL to validate detections and reduce false positives
• Develop hunting queries, bookmarks, livestream investigations, and notebooks
• Create automation rules and Logic Apps playbooks

SkillDynamo Training Approach

SkillDynamo delivers this course through demonstrations, hands-on exercises, scenario analysis, validation checklists, structured troubleshooting, solution reviews, and a final improvement plan. Learners repeatedly practice planning, implementation, evidence collection, testing, correction, and communication so the skills transfer confidently into real workplace situations.