This course describes the features of the Microsoft SDL Threat Modeling tool, which complements the Microsoft SDL Threat Modeling process. While not required to perform threat modeling, use of the tool aids teams with the creation of threat models and helps enumerate threats using STRIDE.
On successful completion of this course, learners should have the knowledge and skills to:
- Evaluate whether to use the tool for threat modeling
- Examine potential flaws in DFDs
- Analyze DFDs for potential threats
- Export threats to issue tracking tools