KNOWLEDGE IN PRACTICE
My security foundation, a practical defensive exam, and the next step in Microsoft security operations.
Security+
A foundation in securing systems, understanding threats, and responding to security incidents.
Threats, vulnerabilities, and controls
Identity, access, and system security
Detection, response, and recovery
CDSA
Practical security analysis, SOC operations, and incident handling, with an emphasis on following and documenting evidence.
Network and host investigations
Connect activity across data sources
Document findings and incident impact
SC-200
My next focus: security operations with Microsoft Sentinel, Defender, and KQL.
Analytics, investigations, and hunting
Triage and incident response
Query, correlate, and investigate
KNOWLEDGE TO CAPABILITY
See how the pieces fit together.
Would I be a good fit?
