Attack and Defend the Microsoft Cloud.
Master Entra ID, the Microsoft Defender stack, and Azure workload hardening through practical offensive and defensive labs.
Starting at $250 · Taught by industry-certified ThreatBlock instructors.
What You'll Learn
What you'll master.
6 modules — tap any topic to expand the details.
One-time payment for full course access. Flexible EMI options available at checkout.
Reviews & Testimonial
The Entra ID attack path followed straight by the Conditional Access defenses gave me both sides of the story. My tenant hardening improved immediately.
Learning KQL hunting in Sentinel against real sign-in logs was the highlight. I now write my own analytics rules at work.
The Defender stack module finally connected Defender for Endpoint, Identity, and Cloud Apps for me. The XDR picture makes sense now.
Managed identity abuse and service principal escalation were eye-opening. This course changed how I review Azure RBAC assignments.
The capstone where we attack, detect, and remediate a tenant tied everything together. Easily the most practical Azure security training I have taken.
The Entra ID attack path followed straight by the Conditional Access defenses gave me both sides of the story. My tenant hardening improved immediately.
Learning KQL hunting in Sentinel against real sign-in logs was the highlight. I now write my own analytics rules at work.
The Defender stack module finally connected Defender for Endpoint, Identity, and Cloud Apps for me. The XDR picture makes sense now.
Managed identity abuse and service principal escalation were eye-opening. This course changed how I review Azure RBAC assignments.
The capstone where we attack, detect, and remediate a tenant tied everything together. Easily the most practical Azure security training I have taken.
The capstone where we attack, detect, and remediate a tenant tied everything together. Easily the most practical Azure security training I have taken.
Managed identity abuse and service principal escalation were eye-opening. This course changed how I review Azure RBAC assignments.
The Defender stack module finally connected Defender for Endpoint, Identity, and Cloud Apps for me. The XDR picture makes sense now.
Learning KQL hunting in Sentinel against real sign-in logs was the highlight. I now write my own analytics rules at work.
The Entra ID attack path followed straight by the Conditional Access defenses gave me both sides of the story. My tenant hardening improved immediately.
The capstone where we attack, detect, and remediate a tenant tied everything together. Easily the most practical Azure security training I have taken.
Managed identity abuse and service principal escalation were eye-opening. This course changed how I review Azure RBAC assignments.
The Defender stack module finally connected Defender for Endpoint, Identity, and Cloud Apps for me. The XDR picture makes sense now.
Learning KQL hunting in Sentinel against real sign-in logs was the highlight. I now write my own analytics rules at work.
The Entra ID attack path followed straight by the Conditional Access defenses gave me both sides of the story. My tenant hardening improved immediately.
Frequently Asked Questions
How long is the Azure Security course?
The course runs for 24 Hours.
Is the course live or pre-recorded?
Classes are taught live online by ThreatBlock instructors.
How many learners are in each batch?
Each batch is capped at 18 learners, so every learner gets time with the instructor.
What level is the Azure Security course?
The course is set at Intermediate level.
Does the Azure Security course prepare me for a certification?
Aligns with the Microsoft SC-200 (Security Operations Analyst) and AZ-500 (Azure Security Engineer) exam objectives.
Which tools will I use?
You work hands-on with Microsoft Entra ID, Microsoft Sentinel, Microsoft Defender for Cloud, AzureHound, ROADtools and Azure CLI.
What does the course cover?
The course is organised into 6 modules: Azure & Entra ID Fundamentals; Identity Attacks on Entra ID; Conditional Access & MFA Defense; Microsoft Defender Stack; Workload & Data Hardening; Monitoring, IR & Governance.