Threat hunting with Microsoft Sentinel

Solution Architect
Security Operations Analyst
Microsoft Sentinel

In this module, you'll learn to proactively identify threat behaviors by using Microsoft Sentinel queries. You'll also learn to use bookmarks and livestream to hunt threats.

Learning objectives

In this module, you will:

  • Use queries to hunt for threats.
  • Save key findings with bookmarks.
  • Observe threats over time with livestream.


  • Familiarity with security operations in an organization.
  • Basic experience with Azure services.
  • Basic knowledge of operational concepts such as monitoring, logging, and alerting.
  • Basic Microsoft Sentinel functionality.
  • Access to a Microsoft Azure subscription for exercise tasks.