Forum Discussion
Could someone advise me if it's possible to create my own small lab?
Hi, for some time now I've been learning about Sentinel and Defender. Could someone advise me if it's possible to create my own small lab?
I had everything set up because I have an 'MSDN Platforms Subscription' license. I have started trial
version of Sentinel and Defender + Microsoft 365 E5 Enterprise Mobility + Security E5
I was able to create everything as in a real environment until the Microsoft 365 E5 trial ended after
30days * not 100% sure if is just because of license ended?*
After that, I lost access to Email logs (threat hunting in Defender or running custom rules etc..) -
Goal: Creating a lab environment where I can have 1x Outlook, 1x Teams, Defender, and Sentinel (there won't be many logs as it will be just for testing purposes, with only one virtual machine).
I'm wondering if it's possible for me to create such a lab. What could be the cost? Office 365 Enterprise E5 is $57, and it seems that I can't use the resources from MSDN, so I would need to purchase it using my own funds.
E5 trail for 30 days
90-day Defender for Office 365 trial at the Microsoft 365 Defender portal trials hub
Sentinel works fine after 31 days and status is Active and pricing tier is - pay as you go
4 Replies
- GBusheyFormer EmployeeYou can create the lab, but as you found out, it cannot be a MSDN lab as M365 is not part of the Azure benefit that you get through MSDN. You would need to create the M365 and pay for it but that information could then be sent to your Sentinel environment that is part of your MSDN benefit.
- CyberKingCopper Contributor
Thank you for your reply! You mention that i need to create the M365 so what this really means? Do i need licence e5? And something else?how much it will cost around? If you know, please let me know. If not i will try to Google it for more details.
Other thing i managed to find out there is some kind of developer m365. Did you heard about that?
https://youtu.be/M8P3CcWFSFs
- GBusheyFormer EmployeeDepending on how much data, and from what sources, you would need to enable one of M365 licenses. Sadly, I am not that familiar with their licensing so you may need to either post in on of their techcommunity sites or do some more searching.