Deploying and Managing Defender for Endpoint for Windows

Course details

Did you know that Microsoft Defender for Endpoint (MDE) can help you secure endpoints using global threat intelligence and multiplatform detection and response? In this course, instructor Ru Campbell provides an overview of best practices and architectural insights for MDE, from onboarding devices and deploying and managing security capabilities, to responding to threats and incidents, and much more. Discover how this vast suite comes together to protect your organization more effectively with ease, as you develop the skills required to configure and manage Windows Defender Antivirus, enable and use attack surface reduction, and leverage the power of SmartScreen, Windows Firewall, device control, and conditional access.

Concepts

0. Introduction

01 - Get going with Microsoft Defender for Endpoint
02 - What is Microsoft Defender for Endpoint
03 - What you'll need

1. MDE Fundamentals and Architecture

04 - Navigating the Microsoft Defender XDR portal
05 - Understanding client-based and service-based features
06 - Understanding security settings management
07 - Setting up security settings management
08 - Device groups, tags, and RBAC

2. Windows Onboarding

09 - Onboarding methods and recommendations
10 - Onboarding Windows manually
11 - Onboarding Windows with Intune
12 - Onboarding Windows with Configuration Manager
13 - Onboarding Windows with Group Policy
14 - Onboarding Windows with Defender for Cloud

3. Windows Defender Antivirus (MDAV)

15 - Introduction to Defender Antivirus
16 - Tamper protection
17 - Updates
18 - Exclusions
19 - Running modes

4. Attack Surface Reduction

20 - Attack surface reduction rules
21 - Exploit protection
22 - SmartScreen and network protection

5. Additional Capabilities

23 - Windows Firewall with Advanced Security
24 - Device control for Windows
25 - Device compliance integration

Conclusion

26 - Next steps