microsoft-365-defender-train-security-staff.md

title	description	ms.service	f1.keywords	ms.author	author	ms.localizationpriority	manager	audience	ms.collection	ms.topic	search.appverid	ms.date
Train your security staff for Microsoft Defender XDR	Get to the key training resources for quick ramp-up of your security staff.	defender-xdr	NOCSH	dansimp	dansimp	medium	dansimp	ITPro	m365-security tier3	conceptual	MOE150 MET150	01/03/2022

Train your security staff for Microsoft Defender XDR

[!INCLUDE Microsoft Defender XDR rebranding]

Applies to:

• Microsoft Defender XDR

With the urgency of protecting your organization and its data from attackers, you need to quickly onboard your security staff to Microsoft Defender XDR. Microsoft provides multiple types of learning and self-study resources for Microsoft Defender XDR and associated services.

Microsoft Defender XDR Ninja training

Microsoft Defender XDR Ninja training is a set of organized sections and modules to step you through the features and functions of Microsoft Defender XDR. The training goes across the threat signal sources—such as Microsoft Defender for Endpoint and others—but does not cover the individual sources themselves.

The content is structured into three different knowledge levels, with multiple modules: Fundamentals, Intermediate, and Expert. Each level includes a knowledge check to test your understanding of the material.

Learning paths

Use these learning paths and their modules to build an understanding of Microsoft Defender XDR and Microsoft Defender for Endpoint, one module and unit at a time.

• Detect and respond to cyber attacks with Microsoft Defender XDR

• Secure your organization with Microsoft Defender for Endpoint

Learning paths in the Microsoft Defender portal learning hub

The Microsoft Defender portal learning hub includes these learning paths:

• Getting started with the Microsoft 365 security center
• How to Investigate Using Microsoft Defender XDR
• Microsoft Defender XDR Basic Training
• Microsoft Defender for Endpoint Basic Training
• Microsoft Defender for Office 365 Best Practices
• Setup

Hands-on with a trial environment

One of the best ways to learn is by configuring and testing Microsoft Defender XDR and its associated services in a trial environment. See Evaluate and pilot Microsoft Defender XDR for the details.

Simulating an attack

To test your security staff on their ability to detect and respond to a cyberattack, use a simulated attack. See Simulate attacks with the Microsoft Defender portal for more information. [!INCLUDE Microsoft Defender XDR rebranding]