Enabling Microsoft Sentinel

In this section, we will demonstrate how to configure Microsoft Sentinel, and we will take the following steps:

1. List the prerequisites
2. Enable Microsoft Sentinel using the Bicep language
3. Enable Microsoft Sentinel using the Azure portal
4. Set up data connectors

Let’s review the components we need to configure before enabling Microsoft Sentinel.

Global prerequisites

To successfully enable Microsoft Sentinel, we need the following:

• An active Azure subscription
• A Log Analytics workspace
• A user with contributor role permissions where the Sentinel workspace resides

Let’s begin.

Enabling Microsoft Sentinel using the Bicep language

In this section, we will enable Microsoft Sentinel in your environment using infrastructure as code with Azure Bicep. Azure Bicep is a Domain-Specific Language (DSL) that uses a declarative syntax to deploy Azure resources.

Think of Bicep as an abstraction on...