Module 1: Attacks, breach detection, and Sysinternals tools

• Understanding attacks
• Detecting breaches
• Examining activity with the Sysinternals tool

Module 2: Protecting credentials and privileged access

• Understanding user rights
• Computer and service accounts
• Protecting credentials
• Privileged-Access Workstations and jump servers
• Local administrator-password solution

Module 3: Limiting administrator rights with Just Enough Administration

• Understanding JEA
• Verifying and deploying JEA

Module 4: Privileged access management and administrative forests

• ESAE forests
• Overview of Microsoft Identity Manager
• Overview of JIT administration and PAM

Module 5: Mitigating malware and threats

• Configuring and managing Windows Defender
• Restricting software
• Configuring and using the Device Guard feature
• Deploying and using the EMET

Module 6: Analyzing activity with advanced auditing and log analytics

• Overview of auditing
• Advanced auditing
• Windows PowerShell auditing and logging

Module 7: Deploying and configuring Advanced Threat Analytics and Microsoft Operations Management Suite

• Deploying and configuring ATA
• Deploying and configuring Microsoft Operations Management Suite

Module 8: Secure Virtualization Infrastructure

• Guarded Fabric
• Shielded and encryption-supported virtual machines

Module 9: Securing application development and server-workload infrastructure

• Using SCM
• Introduction to Nano Server
• Understanding containers

Module 10: Planning and protecting data

• Planning and implementing encryption
• Planning and implementing BitLocker

Module 11: Optimizing and securing file services

• File Server Resource Manager
• Implementing classification management and file-management tasks
• Dynamic Access Control

Module 12: Securing network traffic with firewalls and encryption

• Understanding network-related security threats
• Understanding Windows Firewall with Advanced Security
• Configuring IPsec
• Datacenter Firewall

Module 13: Securing network traffic

• Network-related security threats and connection-security rules
• Configuring advanced DNS settings
• Examining network traffic with Microsoft Message Analyzer
• Securing SMB traffic, and analysing SMB traffic

Module 14: Updating Windows Server

• Overview of WSUS
• Deploying updates by using WSUS