SC-200 - Perform Threat Hunting - Section 3.2

Interpret threat analytics and analyse entity relationships using hunting graphs and Sentinel Graph in Microsoft Defender XDR.

Interpret threat analytics reports in Microsoft Defender XDR to understand active campaigns and assess organisational exposure across impacted assets. Use hunting graphs to visualise blast radius and Sentinel Graph to explore entity relationships and identify paths an attacker could use for lateral movement.

threat analytics in Microsoft Defender XDRhunting graphs including blast radiusSentinel Graph entity relationshipsexposure and impacted assets

More in this domain

Back to all Perform Threat Hunting objectives, or the SC-200 cert hub.

Examworthy is not affiliated with or endorsed by Microsoft. Original, blueprint-aligned practice material only.