The SC-5004 in-company training teaches your security professionals how to defend against cyberthreats with Microsoft Defender XDR. The training focuses on endpoint and identity security and prepares for the Microsoft Applied Skills credential SC-5004. The training lasts 1 day and is ideal as a practical complement to SC-900 or as part of a broader Microsoft Defender adoption strategy.

Who is this training for?

Suitable for security professionals, IT administrators and SOC analysts who want to use Microsoft Defender XDR for endpoint and identity security. Basic knowledge of Microsoft 365 and security concepts is recommended. Minimum 4 and maximum 12 participants per group.

What will your employees be able to do after this training?

• Understand Microsoft Defender XDR as a centralised security platform
• Configure Microsoft Defender for Endpoint for endpoint security
• Investigate and remediate endpoint incidents via the Defender portal
• Implement Microsoft Defender for Identity for Active Directory threat detection
• Detect and respond to identity-based attacks
• Correlate incidents across endpoints and identities via Defender XDR
• Conduct threat hunting with advanced hunting queries

Course content

Day 1: Microsoft Defender XDR for Endpoint and Identity
Understanding Microsoft Defender XDR architecture. Onboarding and configuring Microsoft Defender for Endpoint: security policies, attack surface reduction and EDR. Investigating endpoint alerts and incidents. Implementing Microsoft Defender for Identity for detecting Pass-the-Hash, Pass-the-Ticket and other identity attacks. Incident correlation across endpoints and identities via Defender XDR. Using advanced hunting for proactive threat detection.

Practical information

• Duration: 1 day (2 sessions of 3 hours)
• Location: at your location, in Almere, Zwolle, Groningen, Utrecht, Enschede, Den Bosch, Breda, Meppel or Eindhoven (surcharge applies for locations outside Almere)
• Group size: minimum 4, maximum 12 participants per group
• Multiple groups on the same day are possible
• Course materials: available as an option
• Labs: available as an option
• Applied Skills assessment: online via Microsoft Learn

What is included?

• Microsoft Gold certified trainer at your location
• Certificate of participation for each participant upon completion
• Free intake in advance
• Training evaluation upon completion

Course materials and labs are available as an additional option.

Microsoft Applied Skills credential

After this training your employees are prepared for the Microsoft Applied Skills credential SC-5004. This free credential can be earned via a hands-on lab assessment on Microsoft Learn and shared directly on LinkedIn as proof of competence.

SLIM subsidy

As a Dutch SME, you may be eligible for the SLIM subsidy for ICT training. The Dutch government reimburses 60% of your training costs, up to a maximum of €24,999. Period 2 opens 10 August 2026.

Related training courses

• SC-200: Microsoft Security Operations Analyst - deepening after SC-5004
• SC-900: Microsoft Security Fundamentals - recommended preparation
• AZ-500: Microsoft Azure Security Technologies

Request a quote via our quote form or contact us via our contact page. Or ask Sanne, our AI assistant - available 24/7 via the blue icon at the bottom right of the page.