The Microsoft Security Workshop is a three-day engagement where we'll deploy advanced Microsoft Security workloads in the customer's tenant, which helps identify real-time threats to the environment and define clear steps on how to mitigate these threats. We gain visibility in to threats across email, identity and data and can understand the correlation between threats, unsanctioned use of cloud applications and services commonly referred to as shadow IT. With the Azure Sentinel Security Incident and Event Management (SIEM) tool, we discover threats to the on-premises and cloud environments and demonstrate how to automate responses, integrate with Microsoft 365, Azure and supported third party solutions in your environment. The Endpoint Protection module gives insights on active threats and weaknesses on Windows 10 endpoint and what can be done to harden the endpoint surface area.