{"id":28595,"date":"2026-07-21T12:03:56","date_gmt":"2026-07-21T12:03:56","guid":{"rendered":"https:\/\/www.cloudthat.com\/training\/?post_type=stm-courses&p=28595"},"modified":"2026-07-22T06:58:37","modified_gmt":"2026-07-22T06:58:37","slug":"sc-5004-defend-against-cyberthreats-with-microsoft-defender-xdr","status":"publish","type":"stm-courses","link":"https:\/\/www.cloudthat.com\/training\/microsoft-security\/sc-5004-defend-against-cyberthreats-with-microsoft-defender-xdr","title":{"rendered":"SC-5004: Defend against cyberthreats with Microsoft Defender XDR"},"content":{"rendered":"

SC<\/span><\/span>\u2011<\/span>5004 is an intermediate<\/span><\/span>\u2011<\/span>level Microsoft Applied Skills course focused on detecting, investigating, and responding to cyberthreats using Microsoft Defender XDR. The course teaches how to deploy Microsoft Defender for Endpoint, manage and investigate incidents, configure alerts and automation, and perform advanced threat hunting using Kusto Query Language (KQL). Learners gain practical, scenario<\/span><\/span>\u2011<\/span>based experience to strengthen Security Operations\u00a0<\/span>Centre<\/span>\u00a0(SOC) capabilities and defend against modern cyberattacks using Microsoft\u2019s unified XDR platform<\/span><\/span>.<\/span><\/span>\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

SC\u20115004 is an intermediate\u2011level Microsoft Applied Skills course focused on detecting, investigating, and responding to cyberthreats using Microsoft Defender XDR. The course teaches how to deploy Microsoft Defender for Endpoint, manage and investigate incidents, configure alerts and automation, and perform advanced threat hunting using Kusto Query Language (KQL). Learners gain practical, scenario\u2011based experience to strengthen […]<\/p>\n","protected":false},"author":5091,"featured_media":27324,"template":"","meta":{"footnotes":""},"stm_lms_course_taxonomy":[64],"metadata":{"stm_lms_product_id":["28602"],"_edit_lock":["1784703465:7038"],"_edit_last":["7038"],"permalink_customizer":["microsoft-security\/sc-5004-defend-against-cyberthreats-with-microsoft-defender-xdr"],"permalink_customizer_regenerate_status":["1"],"_thumbnail_id":["27324"],"popular_course":["0"],"_popular_course":["field_64253688bc2e5"],"course_banner_image":[""],"_course_banner_image":["field_63c69a6b81cf1"],"mobile_banner_image":[""],"_mobile_banner_image":["field_63cf93896d207"],"banner_link":[""],"_banner_link":["field_63c69a9681cf2"],"banner_image":[""],"_banner_image":["field_621873548f922"],"banner_description":["This exam measures your ability to accomplish the following technical tasks: design solutions that align with security best practices and priorities; design security operations, identity, and compliance capabilities; design security solutions for infrastructure; and design security solutions for applications and data. "],"_banner_description":["field_612c733ed3564"],"overview_section_heading":["Course Overview of SC-5004: Defend against cyberthreats with Microsoft Defender XDR:"],"_overview_section_heading":["field_64538867ffdd0"],"after_completing_course_heading":["After completing SC-5004, participants will be able to: "],"_after_completing_course_heading":["field_645c78ade3f50"],"after_completing_course_0_desciption":["Deploy and configure Microsoft Defender XDR and Defender for Endpoint, including onboarding devices and setting up the security environment."],"_after_completing_course_0_desciption":["field_6103ad2f9f5b2"],"after_completing_course_1_desciption":["Detect, investigate, and manage security incidents using the unified Microsoft Defender portal"],"_after_completing_course_1_desciption":["field_6103ad2f9f5b2"],"after_completing_course_2_desciption":["Perform endpoint and device investigations to gather forensic evidence and remediate threats"],"_after_completing_course_2_desciption":["field_6103ad2f9f5b2"],"after_completing_course_3_desciption":["Configure alerts, detections, and automated investigation and remediation (AIR) to improve response speed and consistency "],"_after_completing_course_3_desciption":["field_6103ad2f9f5b2"],"after_completing_course_4_desciption":["Use Advanced Hunting with Kusto Query Language (KQL) to proactively identify and analyze sophisticated threats "],"_after_completing_course_4_desciption":["field_6103ad2f9f5b2"],"after_completing_course_5_desciption":["Strengthen SOC operations by correlating threat signals and responding effectively to real\u2011world cyberattack scenarios using Microsoft Defender XDR"],"_after_completing_course_5_desciption":["field_6103ad2f9f5b2"],"after_completing_course":["6"],"_after_completing_course":["field_6103aae828228"],"key_features_heading":["Key Features of SC-5004: Defend against cyberthreats with Microsoft Defender XDR:"],"_key_features_heading":["field_645388ceffdd1"],"key_features_0_lists":["Unified XDR platform experience to detect, investigate, and respond to threats across endpoints using the Microsoft Defender portal<\/span><\/span>\u00a0<\/span>"],"_key_features_0_lists":["field_6103ad559f5b3"],"key_features_1_lists":["Hands<\/span><\/span>\u2011<\/span>on deployment of Microsoft Defender for Endpoint, including device onboarding and environment configuration<\/span><\/span>\u00a0<\/span>"],"_key_features_1_lists":["field_6103ad559f5b3"],"key_features_2_lists":["Incident and alert management with end<\/span><\/span>\u2011<\/span>to<\/span><\/span>\u2011<\/span>end investigation workflows in Defender XDR<\/span><\/span>\u00a0<\/span>"],"_key_features_2_lists":["field_6103ad559f5b3"],"key_features_3_lists":["Advanced threat hunting using KQL, enabling proactive detection of sophisticated and hidden threats<\/span><\/span>\u00a0<\/span>"],"_key_features_3_lists":["field_6103ad559f5b3"],"key_features_4_lists":["Automation and remediation capabilities, including Automated Investigation and Remediation (AIR) to reduce response time<\/span><\/span>\u00a0<\/span>"],"_key_features_4_lists":["field_6103ad559f5b3"],"key_features_5_lists":["Applied Skills\u2013aligned curriculum, preparing learners to earn the Microsoft Applied Skills: Defend against cyberthreats with Microsoft Defender XDR credential<\/span>.<\/span><\/span>\u00a0<\/span>"],"_key_features_5_lists":["field_6103ad559f5b3"],"key_features":["6"],"_key_features":["field_6103aaff28229"],"who_should_attend_heading":["Who should Attend SC-5004: Defend against cyberthreats with Microsoft Defender XDR?"],"_who_should_attend_heading":["field_645388faffdd2"],"who_should_attend_0_attend_lists":["Security Operations Analysts (SOC Analysts) responsible for monitoring, investigating, and responding to security incidents using Microsoft Defender technologies "],"_who_should_attend_0_attend_lists":["field_6103adfb3f3e4"],"who_should_attend_1_attend_lists":["Security Engineers and Incident Responders who deploy, configure, and manage Microsoft Defender for Endpoint and Defender XDR environments "],"_who_should_attend_1_attend_lists":["field_6103adfb3f3e4"],"who_should_attend_2_attend_lists":["IT and Cybersecurity Professionals working in threat detection, endpoint security, and security operations who want hands\u2011on experience with XDR and advanced threat hunting using KQL "],"_who_should_attend_2_attend_lists":["field_6103adfb3f3e4"],"who_should_attend_3_attend_lists":["Professionals preparing for the Microsoft Applied Skills credential: Defend against cyberthreats with Microsoft Defender XDR"],"_who_should_attend_3_attend_lists":["field_6103adfb3f3e4"],"who_should_attend":["4"],"_who_should_attend":["field_6103ab0d2822a"],"prerequisites_heading":["Prerequisites of SC-5004: Defend against cyberthreats with Microsoft Defender XDR:"],"_prerequisites_heading":["field_64538a51ffdd3"],"prerequisites_text":["The following prerequisites are recommended to learners:\r\n