Instructor-led training
SC-200 Training in London and Live Online
SC-200: Microsoft Security Operations Analyst
Develop defensive security skills with SC-200 training in London or live online. Explore Microsoft Sentinel, Defender XDR, KQL and incident response in guided scenarios.
Request Course Information
Price:
Price on request
Contact us for current fees, dates and exam arrangements.
Intermediate
Understand common cyberthreats and basic security operations.
4 days to complete
Available online
& in class
Select your preferred method
- In Classroom
- Live Virtual
- 1 - 1 Training
- Corporate Training
- Onsite Training
Learn through clear explanations, demonstrations, guided activities and scenario discussions. Connect the concepts with workplace decisions and leave with practical priorities for further study. Classroom and live online options are available; contact us to confirm dates, equipment and lab arrangements.
Training supports preparation for SC-200. Microsoft awards certification when its examination and any prerequisite requirements are satisfied; attendance alone does not award the credential.
Study your way with flexible learning options designed to fit around your schedule.
With small groups of students, our instructors can work closely with each student
Our class schedules are flexible on weekdays, weekend or evening to suit your schedule.
Our instructors follow a modified and personalised approach to engage students during class
Lab arrangements vary by course. Confirm access and equipment requirements before booking.
Apply a consistent approach to incident triage.
Create a structured plan for further analyst practice.
Use security data to build an investigation narrative.
Recognise opportunities to improve detections and reduce noise.
Communicate findings and escalation priorities clearly.
Develop skills for your next step
Investigate security alerts and support incident response.
Threat Hunting Analyst: Explore security data to identify suspicious activity and detection gaps.
Monitor threats and contribute to coordinated investigations.
Syllabus
Security operations foundations
Map analyst responsibilities, investigation workflows and escalation decisions.
Microsoft Defender XDR
Explore incident correlation, advanced hunting and automated investigation capabilities.
Microsoft Sentinel platform
Review workspaces, permissions, retention, workbooks and platform optimisation.
Data collection and detections
Plan connectors, diagnostic logs, analytics rules and threat intelligence ingestion.
Kusto Query Language
Use filters, aggregation and joins to investigate example security events.
Incident investigation
Triage incidents, collect context and assess response options in defensive scenarios.
Hunting and automation
Develop hunting hypotheses and explore automation rules and playbooks.
Analyst workshop and exam preparation
Document an investigation and review SC-200 practice priorities.
FAQs
Who is this course for?
This course is designed for SOC analysts, security engineers and IT professionals moving into security operations.
What experience do I need?
Basic security knowledge and familiarity with Azure, Microsoft 365 and operating systems recommended. Contact us if you would like help choosing the right starting point.
How long is the course?
The instructor-led course runs over 4 days. Confirm the timetable and session arrangements when booking.
Can I attend in London or online?
Classroom and live online delivery options are available. Contact London IT Training for dates and arrangements.
Does attending award the Microsoft certification?
No. Training supports preparation for SC-200; Microsoft awards the certification after its examination and any prerequisite requirements are met.
Are the exam and lab costs included?
Request a quotation confirming tuition, any exam voucher and required software or lab access. Inclusions are agreed before booking.
What should I know about the SC-200 pathway?
Activities focus on defensive analysis in authorised training environments. The course does not require or involve attacking third-party systems.
How do I book or request group training?
Contact London IT Training to discuss pricing, dates, delivery requirements and group options.
Talk to one of our advisers about dates, delivery options and certification routes. We’ll call you back within 1 working day.
