how to setup sentinel

Question

I am trying to set up a Microsoft Sentinel demo account for personal training. My aim is to use the live environment to investigate incidents and become familiar with the steps involved in resolving them. Could anyone advise on how to create one?

Answer 1

Hi!

For sentinel demo environment you need a test tenant. You could use this - https://learn.microsoft.com/en-us/office/developer-program/microsoft-365-developer-program-get-started

To create sandbox tenant with E5 licenses. For MS Sentinel deployment test tenant is not enough.. as you need Azure Subscription. You coul either use your credit card and start trial Azure sub. for 30 days - https://azure.microsoft.com/en-us/pricing/purchase-options/azure-account

Or use Azure PAYG subscription with same credit card.. and test it for 30 days for 200$ as still sentinel is free for first 30 days.

Or you could also use Visual Studio (MSDN) Subscription if you have such licenses.

Here are good deployment what you could also use which will have data for investigation and training - https://github.com/SecureHats/Sentinel-playground

Answer 2

Hello olabode.majekodunmi

Thank you for posting your question in the Microsoft Q&A forum.

I understand you’re trying to enable a free trial of Microsoft Sentinel but are unable to proceed. 

To enable Microsoft Sentinel, please follow the step-by-step instructions provided in the document:

https://learn.microsoft.com/en-us/azure/sentinel/quickstart-onboard#enable-microsoft-sentinel-

For your reference, here are the details about the Sentinel free trial:

Enable Microsoft Sentinel on an Azure Monitor Log Analytics workspace and the first 10 GB/day ingested using the Analytics logs plan is free for 31 days. The cost for both Log Analytics data ingestion and Microsoft Sentinel analysis charges up to the 10 GB/day limit, are waived during the 31-day trial period. This free trial is subject to a 20-workspace limit per Azure tenant.

See the Microsoft Sentinel pricing page for information on how usage beyond these limits is charged. Charges related to extra capabilities for automation and bring your own machine learning are still applicable during the free trial, as well as any Microsoft Sentinel data lake related charges.

During your free trial, find resources for cost management, training, and more on the News & guides > Free trial tab in Microsoft Sentinel on the Azure portal. This tab also displays details about the dates of your free trial, and how many days left until the trial expires.

I hope this information is helpful. If you need any additional details or have further questions, please feel free to reach out. If this was helpful to resolve your query, please accept the answer and upvote it 👍 to make it helpful for the community.