This month has seen Sentinel being introduced and as such a greater emphasis has been put on developing capabilities on Sentinel and how it interacts with the Microsoft security suite.

On that note, I spent an additional chunk preparing myself to take the Microsoft SC-900 examination before taking and passing it with 90%

For other works this month, it’s been spent on a few different areas. Firstly is an aim to improve my skills at Active Threat Hunting. To do this I’ve primarily been focusing on the Palo Alto Strata Cloud Manager Platform, working on better understanding traffic flowing through the organisation and how to best filter out and action potential threats. Examples include certain file extensions seen, DGA sightings, unusual TLDs can all lead to indicators of threat.

On a non-technical note, I heard something this month that made me really think about what constitutes a valuable employee. That was the idea that a truly valuable employee will not just raise an issue to be addressed but also propose solutions to remediate that issue, taking a more active role as per se.

Learning below as per normal. Formally it’s been SC-900 heavy for obvious reasons but I have future plans to tackle some more Immersive Labs alongside learning the ArcX Threat Intelligence Practitioner course (accredited by CREST) and starting the journey to SC-200.

Microsoft Learn (SC-900)
Describe the function and identity types of Microsoft Entra ID
Describe the authentication capabilities of Microsoft Entra ID
Describe access management capabilities of Microsoft Entra
Describe Microsoft Security Co-pilot
Describe core infrastructure security services in Azure
Describe the security management capabilities in Azure
Describe security capabilities of Microsoft Sentinel
Describe threat protection with Microsoft Defender XDR
Describe Microsoft’s Service Trust portal and privacy capabilities
Describe the data governance solutions of Microsoft Purview
Describe the data compliance solutions of Microsoft Purview
Describe the data governance solutions of Microsoft Purview