DEFEND. VERIFY. PROTECT.

Advanced Hunting

Learn Advanced Hunting

A progressive, operationally focused learning path for Microsoft Defender XDR Advanced Hunting. Learn how to move from security questions to evidence, KQL, interpretation, decisions, and pivots.

Lessons

Recommended Learning Path

1
Advanced Hunting Orientation
2
Your First Query
3
Filtering
4
Result Shaping
5
Summarizing
6
Entity Profiling
7
Correlation
8
Investigation Thinking
9
Investigation Packs

You can skip around freely — no content is locked behind prerequisites.