Microsoft Cybersecurity Pro Track: PowerShell Security

Learn all about PowerShell security concepts, tools and capabilities (with Hands-On Lab)

What you'll learn
Understand the architecture of Powershell
Deploy Powershell operational security
Analyze PowerShell Auditing and Logging
Enhance server management with Desired State Configuration and Just Enough Administration
Analyze and debug scripts
Understand Powershell based exploits and their remediation

Requirements
Basic understanding of Windows Powershell
Good foundation in accessing and using simple Windows Powershell commands

Description
In this course, we will examine the concepts of PowerShell from a security stand point. We will cover topics like PowerShell architecture, PowerShell Remoting capabilities, Desired State Configuration, Just Enough Administration and much more.

Later in the course we will examine some common Powershell-based attacks, sample payload and their mitigation/remediation.

After completing this course, you will be able to:

Understand the architecture of Powershell

Deploy Powershell operational security

Analyze PowerShell Auditing and Logging

Enhance server management with Desired State Configuration and Just Enough Administration

Analyze and debug scripts

Understand Powershell based exploits and their remediation

This course is designed to get you started as quickly as possible. There are a variety of self-paced learning activities. You will get:

Video lectures on each topic explaining each concept thoroughly with examples (and Demonstrations where applicable)

Review questions (Final Exam) at the end of the course (quizz) to test your knowledge on the topics learned in the course

Hands-on Lab at the end of the course in which you will practice at your own pace. You will have a step by step instruction file available to complete the Lab tasks like: implementing Powershell DSC, JEA, performing PowerShell attacks and much more.

Final Exam at the end of the course - 20 questions to test your knowledge on the topics and concepts learned in the course

Links to official Microsoft resources/blogs/videos for further documentation.

This course is the third course from a series of 9 courses which address all aspects to become a Microsoft Cyber Security Professional . This cyber security track is designed to teach you, or fill in the knowledge gaps, all the aspects and technologies to become a successful cyber security professional. The entire track addresses mostly Microsoft security technologies, including the latest cloud services made available by Microsoft like: Azure ATP, Office 365 security features and services, Microsoft Intelligent Security Graph, Azure Active Directory Security and many more. This is the third course from a series of 9 courses:

Enterprise Cyber Security Fundamentals (Introduction to Cybersecurity)

Threat Detection ( Detect security breaches early - explore the capabilities of Microsoft's threat detection and mitigation tools - including hands on Lab)

Powershell Security ( Learn how to use Powershell to enhance security and remediate new threats. Learn how to implement and use Desired State Configuration (DSC), Just Enough Administration (JEA) and many more - including hands on Lab) - to be released

Manage Identity (Learn the industry's best practices in regards to managing identity and especially privileged identities. This course takes a hands-on approach to identity management. You will create a bastion host, configure Privileged Access Management, set up Microsoft Identity Manager PAM, and more - including hands on Lab) - to be released

Office 365 Security ( Review the different types of threats that can target your organization and learn how to implement and manage Office 365 security features like Advanced Threat Protection, Threat Intelligence, and Advanced Security Management) - to be released

Windows 10 Security Features ( Learn about the continually evolving security features of the Windows 10 operating system. Discover how to deploy its advanced capabilities - including hands on Lab) - to be released

Windows Server 2016 Security Features ( Windows Server 2016 provides layers of protection that help address both known and emerging threats. This course addresses how to implement and leverage all these security features. Learn how it actively contributes to securing your infrastructure so you can better safeguard against security breaches - including hands on Lab) - to be released

Microsoft Azure Security Features ( Learn Azure security best practices and understand the terminology, tools, and techniques for creating a highly secure, resilient cloud service. You will also learn about and use the additional security services offered in Azure and Intune) - to be released

Planning and Implementing a Security Incident Response (Learn to manage an enterprise security incident while avoiding common errors, increasing both the effectiveness and efficiency of your incident response efforts) - to be released

Microsoft, Windows, Microsoft 365 and Microsoft Azure are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. This course is not certified, accredited, affiliated with, nor endorsed by Microsoft Corporation.

Who this course is for:
Security Administrators, Security Analysts, System Administrator
Any IT enthusiast who wnts to get started in cyber security and be confortable with the Microsoft Security services

More Info