KORRA.TRAINING Microsoft SC-200 — The Analyst's Exam, From the Log Up
The SOC analyst's certification, taught from the log up: the query language from nothing on data shaped like real tickets, what a detection rule, incident and entity are made of, and the four scenario shapes the exam keeps reusing — with every query actually run and every error real. An independent course, not affiliated with or endorsed by Microsoft.
4개 모듈 · 12개 레슨 · 6h 57m
멤버십으로 잠금 해제lock 강좌 목차
1 The Exam, and the Stack It Assumes 3개 레슨 · 1h 29m lock
- play_circle Four Verbs, One Blueprint 20분
- play_circle Three Surfaces, One Pipeline 24분
- play_circle Which Layer Answers This? 45분
2 The Query Language From Nothing 3개 레슨 · 1h 45m lock
- play_circle A Table and a Bar 26분
- play_circle Count, Then Count By Something 24분
- play_circle Make the Log Say It 55분
3 A Detection Is a Query on a Clock 3개 레슨 · 1h 36m lock
- play_circle A Detection Is a Query on a Clock 24분
- play_circle What an Alert Becomes 22분
- play_circle Schedule It, Then Find the Blind Spot 50분
4 Automation, and the Four Shapes 3개 레슨 · 2h 7m lock
- play_circle Two Kinds of Automatic 22분
- play_circle Detect It, Then Tune It 50분
- play_circle Hunt It, Then Hand It Off 55분