Microsoft Sentinel and Modern SOC Operations in Glasgow

Microsoft Sentinel and Modern SOC Operations in Glasgow, Scotland

This course provides a comprehensive introduction to Microsoft Sentinel and modern SOC operations, covering key concepts, deployment, and management.

Enroll Now

Microsoft Sentinel and Modern SOC Operations is a professional training program delivered by ProgNXT in Glasgow, Scotland. ProgNXT, a globally recognized corporate training provider in 55+ countries, offers this Microsoft Sentinel and Modern SOC Operations course with hands-on, instructor-led sessions. This course offers a deep dive into Microsoft Sentinel, Microsoft's cloud-native Security Information and Event Management (SIEM) and Security...

Expert Panel

Designed and delivered by the ProgNXT Cloud Computing Expert Panel — a vetted team of industry professionals with 17+ years of hands-on experience in AWS, Microsoft Azure, Google Cloud, and cloud architecture

ProgNXT Cloud Computing Expert Panel

Course Code: CEW93
21Hrs
Last Updated: July 2026

Course Rating5/5

This course offers a deep dive into Microsoft Sentinel, Microsoft's cloud-native Security Information and Event Management (SIEM) and Security Orchestration Automated Response (SOAR) solution. Participants will learn how to design, deploy, and manage a modern Security Operations Center (SOC) using Sentinel. The curriculum covers threat detection, incident response, automation, and integration with other security tools, empowering learners to build a proactive and efficient security posture.

Welcome to the official Microsoft Sentinel and Modern SOC Operations certification program in Glasgow, Scotland. This comprehensive training is designed to elevate your professional skills and provide you with practical, industry-relevant knowledge locally. As a globally recognized corporate training provider operating in 55+ countries, ProgNXT ensures that our curriculum meets the highest standards of excellence.

Whether you are looking to upskill your team or advance your personal career, our expert-led sessions will guide you through the core concepts of this domain. Upon successful completion of the 21Hrs program, participants will receive a globally accepted certification, demonstrating their proficiency and readiness to tackle complex challenges in the field.

Basic understanding of cloud computing concepts
Familiarity with Azure portal and core Azure services
Knowledge of cybersecurity fundamentals and common threats
Experience with Windows and Linux operating systems

Upon completion of this course, participants will be able to design, deploy, and manage Microsoft Sentinel in a modern SOC environment. They will gain hands-on experience in data ingestion, threat detection, incident response, and automation, enabling them to enhance their organization's security posture and reduce response times.

Deploy and configure Microsoft Sentinel workspaces
Connect and ingest data from diverse sources
Create and manage analytics rules for threat detection
Investigate and respond to security incidents
Automate response actions using playbooks and Logic Apps
Integrate threat intelligence feeds
Perform proactive threat hunting using KQL
Design and use workbooks for visualization
Implement compliance and governance policies
Optimize SOC operations with Sentinel best practices

Microsoft Sentinel architecture and components
Data connectors and log ingestion
Analytics rules and threat detection
Incident management and investigation
Automation and playbooks
Threat intelligence integration
Hunting and querying with Kusto Query Language (KQL)
Workbooks and reporting
Compliance and governance
Best practices for modern SOC operations

Participants who successfully complete the training will receive an ProgNXT Certification in Microsoft Sentinel and Modern SOC Operations, validating their expertise in deploying, configuring, and managing Microsoft Sentinel for modern SOC operations.

Certificate of completion from ProgNXT
Digital badge for LinkedIn and professional profiles
Verifiable credential with unique ID

Introduction to Microsoft Sentinel and Modern SOC

Overview of SIEM and SOAR
Evolution of SOC operations
Microsoft Sentinel architecture and key features
Licensing and deployment considerations

Hands-on exercises

Workspace Deployment and Configuration

Creating and managing Sentinel workspaces
Configuring permissions and roles
Setting up data retention and archival
Integrating with Azure Lighthouse

Hands-on exercises

Data Ingestion and Connectors

Understanding data sources and connectors
Connecting Microsoft services (Azure AD, Office 365, Defender)
Connecting third-party solutions (Syslog, CEF, AWS)
Custom log ingestion using Log Analytics agent

Hands-on exercises

Analytics and Threat Detection

Built-in analytics rules and templates
Creating custom analytics rules
Using KQL for advanced queries
Managing alert rules and incidents

Hands-on exercises

Incident Management and Investigation

Incident lifecycle and management
Investigation tools and graph
Entity behavior analytics
Case management and collaboration

Hands-on exercises

Automation and SOAR

Introduction to automation rules
Creating and managing playbooks
Using Logic Apps for automation
Automating incident response

Hands-on exercises

Threat Intelligence and Hunting

Integrating threat intelligence feeds
Using TI indicators in analytics
Proactive threat hunting with KQL
Hunting bookmarks and queries

Hands-on exercises

Workbooks, Reporting, and Visualization

Designing custom workbooks
Using built-in workbook templates
Creating dashboards and reports
Exporting data for external reporting

Hands-on exercises

Compliance, Governance, and Best Practices

Compliance standards and Sentinel
Governance policies and RBAC
Cost management and optimization
Best practices for SOC operations

Hands-on exercises

Participants will receive course materials, slides, reference materials, exercises and access to resources for further learning.

Target Audience

Security analysts and SOC operators
Security engineers and architects
IT professionals transitioning to security roles
Cloud security administrators
Incident responders and threat hunters

Evaluation

Hands-on lab exercises and practical assignments
Quizzes and knowledge checks throughout the course
Final assessment to validate skills
Trainer feedback and Q&A sessions

Microsoft Sentinel and Modern SOC Operations Events in scotland

Online Events

Global Region	Location	Start Date	End Date	Action
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌

More Upcoming Session Dates

November 2026

📍 Glasgow, Scotland

7th Nov 2026→9th Nov 2026

🌐 Online Instructor-Led

8th Nov 2026→10th Nov 2026

🌐 Online Instructor-Led

18th Nov 2026→20th Nov 2026

📍 Glasgow, Scotland

21st Nov 2026→23rd Nov 2026

December 2026

📍 Glasgow, Scotland

4th Dec 2026→6th Dec 2026

🌐 Online Instructor-Led

5th Dec 2026→7th Dec 2026

🌐 Online Instructor-Led

19th Dec 2026→21st Dec 2026

📍 Glasgow, Scotland

26th Dec 2026→28th Dec 2026

Events for other courses in Glasgow, Scotland

Global Region	Course Name	Start Date	End Date	Action
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌

Microsoft Sentinel and Modern SOC Operations in Glasgow