

Microsoft Defender Endpoint
Course Overview
The Microsoft Defender for Endpoint course offered by CounselTrain provides comprehensive training on utilizing Microsoft’s advanced endpoint security solution. It covers a broad range of topics, delving into the capabilities of Windows Defender ATP, threat detection, attack surface reduction, and automated investigation and remediation.
Learners will gain insights into the architecture of Windows Defender ATP, learn how it detects sophisticated threats, and explore its various capabilities for enhancing organizational security. The course offers practical lab sessions on Threat & Vulnerability Management, Attack Surface Reduction, and Automated Investigation, allowing participants hands-on experience.
Additionally, the course addresses device management through Microsoft Intune, securing identities with Azure AD, and integrating with System Center Configuration Manager (SCCM). Through this Defender for Endpoint training, individuals will acquire the skills necessary to manage and secure endpoints effectively, ensuring robust protection against emerging cybersecurity challenges.
This comprehensive training will empower learners with the knowledge to implement and manage Microsoft Defender for Endpoint solutions confidently.
Course Content
10 modules · 30 topics01Module 1: Windows Defender ATP3 topics
- The Role of Windows Defender ATP
- Windows Defender ATP Architecture
- What Else Can Windows Defender ATP Do for Us?
02Module 2: Threat & Vulnerability Management4 topics
- Next-generation capabilities
- Dashboard Overview and what it means for my organization
- Configuration score
- Improve your Security Configuration
03Module 3: Attack surface reduction5 topics
- Hardware-based isolation
- Application isolation
- System integrity
- Attack surface reduction
- Network firewall
04Module 4: Endpoint detection and response4 topics
- Security operations dashboard
- Manage incidents
- Take response actions on a machine
- Check activity details in Action center
05Module 5: Automated investigation and remediation3 topics
- Overview of Automated investigations
- Understand the Automated investigation flow
- How threats are remediated
06Module 6: Advanced hunting3 topics
- Overview of advanced hunting
- Advanced hunting reference
- Advanced hunting query language best practices
07Module 7: Configuring Profiles2 topics
- Configuring and controlling device by using profiles
- Managing user profiles
08Module 8: Managing Authentication in Azure AD2 topics
- Azure AD Overview and Managing identities in Azure AD
- Managing device authentication
09Module 9: Managing Device Access and Compliance2 topics
- Microsoft Intune Overview
- Implement device compliance policies
10Module 10: Integration with SCCM2 topics
- Understanding SCCM Roles and Agents
- Defender ATP and Intune based Policy Integration
Schedule Dates
4 upcoming batches| Batch Dates | Duration | Batch Options | Language | Action |
|---|---|---|---|---|
| 28 December 2026 - 31 December 2026 | 4 Days | 8 hours & 4 hours | English / Arabic | |
| 29 March 2027 - 01 April 2027 | 4 Days | 8 hours & 4 hours | English / Arabic | |
| 05 July 2027 - 08 July 2027 | 4 Days | 8 hours & 4 hours | English / Arabic | |
| 11 October 2027 - 14 October 2027 | 4 Days | 8 hours & 4 hours | English / Arabic |
Can’t find a suitable date? Request a schedule that fits your team.
Request More InformationFAQs
What is Microsoft Defender for Endpoint?
Microsoft Defender for Endpoint is a comprehensive endpoint security solution that provides advanced threat protection, attack surface reduction, automated investigation and remediation, and more. It is designed to help organizations detect, prevent, and respond to security threats.
What are the prerequisites for this course?
Basic knowledge of Windows operating systems, cybersecurity concepts, and general IT infrastructure is recommended. However, the course starts with foundational topics, making it accessible to those new to Microsoft Defender for Endpoint.
How is the course structured?
The course is structured into modules, each focusing on a specific aspect of Microsoft Defender for Endpoint. Each module includes theoretical content, practical examples, and hands-on lab sessions to reinforce learning.
Will I get practical experience during the course?
Yes, the course includes hands-on lab sessions that allow you to apply what you learn. You will gain practical experience in Threat & Vulnerability Management, Attack Surface Reduction, and Automated Investigation.
Flexible Training Options to Meet Your Needs
Choose how you learn — live online, in-classroom, at your workplace, or internationally. CounselTrain delivers certified IT training across the UAE in the format that fits your team.
Select the method that best suits your needs.
Online Instructor-Led Training
Learn from the comfort of your workplace or at home through live virtual sessions led by expert trainers.
Learn moreHighlights
Classroom Training
Participate in interactive, face-to-face training in our top 5-star training facilities in Dubai.
Learn moreHighlights
Onsite Training
Learn a customised curriculum in your workplace to ensure the most impact and team participation.
Learn moreHighlights
Overseas Training
Participate in our international training sessions and improve your abilities with world-class instructors.
Learn moreHighlights
Related Courses
Other courses in the same category that might interest you.


T|IE: Threat Intelligence Essentials
View Course
I|SE: IoT Security Essentials
View Course
