Technical requirements
In this chapter, we will be focusing on configuring Microsoft Sentinel and Microsoft Defender for security monitoring. To complete some of the walkthroughs described in this chapter, you will require the following:
- An active Microsoft Azure subscription with rights to provision services.
- An internet browser with access to the internet.
- A virtual machine (VM) that can be used as a lab machine for some of the exercises, preferably a locally accessible lab machine or test machine.
- To use Microsoft Defender for Endpoint, you will either need to have an E5 license or a Defender for Servers license. Both of them are accessible as a free trial.