Sigma Detection Rule Technical Investigation
Research Sigma's official rule format to interpret log sources, detection selections, conditions, field modifiers, statu...
8 questions · 40 minExam
Microsoft Defender XDR Hunting Schema Investigation
Subject
Cyber Threat Intelligence
Format
Research investigation
Duration
45 mins
Questions
8
Passing Score
75%
Created by
Threat Intelligence Lab
Updated
16 August 2026
Instructions
Use the official Microsoft Learn advanced-hunting schema, DeviceProcessEvents, DeviceNetworkEvents, and hunting best-practices pages. Verify column definitions rather than guessing from KQL names.
About this learning content: Courses, lessons, assessments, explanations and illustrations may be created with the help of artificial intelligence. We review and check the material and do our best to avoid incorrect or outdated information, but mistakes, omissions or ambiguous questions may remain. Please verify information before relying on it for professional, security, legal or operational decisions. Read the full notice or report an issue.
Ready to take the assessment?
Sign in to answer the questions, save your result and receive a certificate when you pass.