Hands-On LabBeginnerFree

Deploying Your First Microsoft Sentinel Workspace on Azure

Learn to set up Microsoft Sentinel workspace, connect it to a Log Analytics workspace, and prepare for advanced security monitoring and threat detection.

Browse all labs
60 minEstimated time
3Guided steps
AutoVerification
IsolatedSandbox
Deploying Your First Microsoft Sentinel Workspace on Azure

Lab overview

Microsoft Sentinel is a powerful, cloud-native SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) solution that helps organizations monitor, detect, and respond to security threats in real time. This lab introduces you to Microsoft Sentinel by walking you through the creation of your first Sentinel workspace and connecting it to a Log Analytics workspace. These foundational steps prepare your environment for advanced security monitoring and analytics.

Objectives

Upon completion of this lab, you will be able to:

  • Understand the purpose and architecture of Microsoft Sentinel.
  • Create and configure a Sentinel workspace in the Azure portal.
  • Connect Sentinel to a Log Analytics workspace for data ingestion.
  • Prepare your Sentinel workspace for connecting data sources and creating detection rules.

Who is this Lab For?

This lab is ideal for:

  • Beginners who are new to Microsoft Sentinel and want to understand its setup and configuration.
  • Security professionals looking to explore Microsoft Sentinel as part of their organization's security operations.
  • Developers and IT administrators seeking to enhance their skills in cloud security monitoring.

Verified against your live environment

An automated validation engine inspects your actual resources and configurations as you work. Completion means the task was performed — not multiple choice, real-world proficiency.

[CHECK] validation_activelive
Inspecting deployed resources...
Verifying configuration state...
✓ Step requirements satisfied

More labs like this

1 hour

Creating and Deploying Azure Functions using Azure Functions Core Tools

In this lab, you will learn how to create and deploy Azure Functions using Azure Functions Core Tools.

1 hour

Implement Network Security Groups (NSGs) and Application Security Groups (ASGs) in Azure

Secure Azure VMs using Network Security Groups and Application Security Groups. Create rules, control traffic flow, and implement least privilege access.

1 hour

Creating a Web App on Azure App Service using Azure Portal

Learn how to create, configure, and deploy a web application using Azure App Service through the Azure Portal's interface.

Related reading

Azure AI Services Explained: A Beginner's Map to Vision, Speech, Language, and OpenAIA beginner's map to Azure AI Services. What Vision, Speech, Language, Content Safety, and Azure OpenAI each do, when to use them, and a week-by-week path with hands-on labs to start building today.Azure Security Best Practices - A Complete Checklist for 2026A comprehensive Azure security checklist covering identity, networking, data protection, monitoring, and governance. Actionable recommendations with hands-on labs for each section.Azure Compute Services Compared — VMs vs. App Service vs. Functions vs. Container AppsA practical comparison of Azure VMs, App Service, Functions, and Container Apps — what each does, what it costs, and when to use it.
FreeNo credit card required
Duration
60 min
Steps
3

Environment

Live Cloud Environment

Every lab includes

  • Real environment, pre-credentialed
  • Automated checks on every step
  • Isolated sandbox, auto cleanup
  • AI-recommended next steps

Lab curriculum

  1. 01

    Logging into Azure Account using Azure Portal

  2. 02

    Deploying Your First Microsoft Sentinel Workspace

    1 automated check

  3. 03

    Exploring Microsoft Sentinel

Not the lab you were looking for?

Browse 150+ hands-on labs across AWS, Azure, Kubernetes, Docker, and cloud security.

Explore the catalog