Microsoft 365 Threat Defense Mastery

← All courses

The Hacking Coach course

Microsoft 365 Threat Defense Mastery: A Consultant’s Guide to Zero Trust and SMB Security

Apply Zero Trust and Microsoft 365 Business Premium to secure small and medium businesses.

$616 hours 48 minutes16 modules
Microsoft 365 Threat Defense Mastery: A Consultant’s Guide to Zero Trust and SMB Security course cover

Learning objectives

By the end of this course, you will be able to:

  • Implement Zero Trust Security: Apply Zero Trust principles to secure identities, devices, and applications in SMB environments using Microsoft 365 Business Premium.
  • Configure Microsoft Defender for Business: Deploy and manage advanced threat protection features, including Threat & Vulnerability Management (TVM), Attack Surface Reduction (ASR), and Endpoint Detection and Response (EDR).
  • Strengthen Email and Collaboration Security: Optimize anti-spam, anti-phishing, and anti-malware settings and configure Safe Links and Safe Attachments for secure communications.
  • Deploy and Manage Security Baselines: Customize and implement Microsoft’s security baselines to protect endpoints, apps, and browsers while minimizing operational risks.
  • Automate Security Operations: Utilize PowerShell scripts and Microsoft Intune to automate the deployment and management of security policies.
  • Develop a Threat Response Plan: Establish and operationalize incident response strategies to detect, remediate, and prevent security breaches.
  • Protect Sensitive Data: Implement data governance strategies, including sensitivity labels, retention policies, and Data Loss Prevention (DLP) to safeguard critical information.
  • Apply Conditional Access Policies: Integrate risk-based policies to enforce secure access to corporate resources based on device compliance and user behavior.
  • These objectives will equip you to design, implement, and maintain robust security frameworks tailored to SMBs, leveraging the full capabilities of Microsoft 365.

Overview

Let’s face it—cybersecurity is no longer optional, even for small and medium-sized businesses. The threats are real, and SMBs are often the prime targets. That’s where this course comes in.

Microsoft 365 Threat Defense Mastery is designed to take the overwhelming world of cybersecurity and break it down into practical, actionable steps you can apply immediately. Whether you’re an IT pro working to protect your own business or a consultant helping clients stay secure, this course is your roadmap to mastering Zero Trust security and building a rock-solid defense with Microsoft 365.

We’ll walk you through everything from setting up secure identities and managing devices to configuring advanced tools like Microsoft Defender for Business. You’ll learn how to create smart policies, automate routine tasks, and respond to threats quickly and effectively—all while keeping things manageable for SMB budgets and teams.

By the end of this course, you won’t just know what to do—you’ll know how to do it, confidently and efficiently. This is more than just a technical guide; it’s your companion for keeping businesses secure in today’s fast-paced digital world.

Curriculum

Learning time: 6 hours 48 minutes

Introduction to Microsoft 365 Security for SMBs28 minutes
  • Explore Microsoft 365 Business Premium Security Fe…
  • Identify SMB-Specific Cybersecurity Challenges
  • Implement the Zero Trust Security Model
Licensing and Microsoft 365 Security Architecture26 minutes
  • Understand Microsoft 365 Business Premium as a Sec…
  • Differentiate Between Business Premium and Enterpr…
  • Align Security Solutions with Organizational Goals…
Foundations of Zero Trust Security in Microsoft 36527 minutes
  • Implement Secure User Identities with Conditional
  • Establish Device Compliance and App Protection Pol…
  • Block Unmanaged and Non-Compliant Devices
Identity and Access Management (IAM)27 minutes
  • Secure Authentication Practices with Azure AD
  • Manage Privileged Accounts and Roles Effectively
  • Configure Just-In-Time (JIT) and Just-Enough-Acces…
Threat & Vulnerability Management (TVM)27 minutes
  • Utilize Microsoft Defender for Business for Vulner…
  • Configure Continuous Monitoring and Remediation
  • Report on Threat Exposure and Secure Score Improve…
Configuring Email and Collaboration Security19 minutes
  • Implement Safe Links and Safe Attachments Policies…
  • Manage Quarantine and Alert Policies Effectively
Device and Endpoint Security Management27 minutes
  • Onboard Devices to Intune and Microsoft Defender f…
  • Configure Endpoint Security Policies
  • Implement Disk Encryption with BitLocker
Security Baselines and Profiles27 minutes
  • Deploy Microsoft’s Security Baselines for Windows
  • Manage Exceptions and Customize Security Profiles
  • Transition from Baseline to Standard and Strict Pr…
Advanced Attack Surface Reduction (ASR)28 minutes
  • Apply ASR Rules to Mitigate Common Attack Vectors
  • Run ASR Policies in Audit Mode for Impact Assessme…
  • Block Malicious Processes, Scripts, and Exploit Te…
Endpoint Detection and Response (EDR) and Automated Remediation27 minutes
  • Understanding EDR (Endpoint Detection and Response…
  • Introduction to Configuring Automated Investigatio…
  • Investigating Incidents and Executing Remediation
Conditional Access and Risk-Based Policies27 minutes
  • Implementing Conditional Access Based on Risk Leve…
  • Understanding Microsoft Defender Risk Scores
  • Blocking or Granting Access Based on Machine Risk
Data Protection and Governance26 minutes
  • Implementing Sensitivity Labels and Retention Poli…
  • Understanding Data Loss Prevention (DLP) in Micros…
  • Encrypting Email and Controlling Data Sharing Acro…
Application Security and Shadow IT Management27 minutes
  • Introduction to Application Security
  • Introduction to Managing Browser Security with Mic…
  • Monitoring and Restricting Third-Party App Permiss…
Automation and PowerShell Scripting for Security27 minutes
  • Introduction to Automating Security Policy Deploym…
  • Introduction to Graph API for Intune and Defender
  • Leveraging Automation for Compliance and Configura…
Operationalizing Security and Incident Response11 minutes
  • Operationalizing Security and Incident Response
Operationalizing Security and Incident Response27 minutes
  • Establishing a Threat Response Framework for SMBs
  • Creating and Managing Alert Workflows and Notifica…
  • Ongoing Security Assessments and Planning for Futu…

Prerequisites and equipment

  • Prerequisites
  • To get the most out of this course, you should have:
  • Basic IT Knowledge: Familiarity with IT systems, networking, and general security principles.
  • Experience with Microsoft 365: A working knowledge of Microsoft 365 features, including Exchange Online, SharePoint, and Teams.
  • Access to a Microsoft 365 Tenant: A Microsoft 365 Business Premium subscription (or equivalent) to follow along with hands-on exercises.
  • Required Equipment
  • Computer or Laptop:
  • Windows 10/11 operating system recommended.
  • Sufficient performance to run Microsoft 365 administrative tools and PowerShell scripts.
  • Internet Connection: Reliable access to the internet for cloud-based Microsoft 365 services.
  • Microsoft Intune Access: If you plan to implement device management features, Intune integration is essential.
  • Administrative Privileges: Admin-level access to a Microsoft 365 tenant for configuring policies and managing devices.
  • PowerShell Installed: The latest version of Windows PowerShell or PowerShell Core for scripting exercises.

Ready to start Microsoft 365 Threat Defense Mastery: A Consultant’s Guide to Zero Trust and SMB Security?

Self-paced, on The Hacking Coach.

Enroll now ↗