Hello, and welcome back. What we're gonna do here in this brief demonstration is just walk through the process of enabling Azure Sentinel in Microsoft Azure. On the screen here, I'm logged into my Azure portal. I'm at the homepage and I'm logged in as an admin for my fictional Berks Batteries organization.

To enable Azure Sentinel, what I can do here is search up the top here in the search bar for Azure Sentinel. And what we'll do here is we'll select it from services and we can see, we have no Azure Sentinel to display here. So let's go ahead and create Azure Sentinel. And then what we have to do here is create a workspace for Azure Sentinel.

Now, if we had an existing workspace available, we could select it, but we don't have any. So we'll go ahead and create a new workspace here. Now to create our workspace, we need to provide some basic information. Essentially, what we're creating is a log analytics workspace. So what we'll do here is we'll deploy into our Berks Batteries subscription. And then what we'll do is deploy into the Berks RG resource group. We could create a new one if we wanted to. But this one works for this demonstration.

Now, if we hover over the icon here for name, we can see that the workspace name needs to be between four and 63 characters. It can be letters, digits, or the hyphen. So what we'll do here is we'll just call this MyWorkspace. Now, if we next over to pricing here, we can choose a pricing tier. Now the only pricing tier I have available to me is pay as you go. So that's what we'll go with here.

We'll go ahead and click through to tags. We're not gonna do any tagging here, so we'll review and create. And then from here, we can review our settings and then go ahead and deploy the log analytics workspace. So we'll close our notification here. And so now we have a workspace here, and we'll go ahead and add. And what we're doing here is adding Azure Sentinel to the new workspace.

And now we can see we've successfully deployed Azure Sentinel. And from this getting started page here, we can connect to data sources to collect data. We can create security alerts, and we can perform automation and orchestration. Under threat management, we can look at incidents. We can look at workbooks. We can perform hunting. And then of course, under configuration, we can configure data connectors, analytics, and configure the watch list.