New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this lab, you will implement Advanced threat hunting by using Microsoft Defender and Entra ID.
Install and configure the Microsoft Defender for Identity sensor on a domain controller
Configure domain object auditing and manage user accounts in Active Directory
Perform advanced hunting queries in Microsoft Defender and save the query results
Create and monitor security groups in Entra ID, set up detection rules for user activity, and verify alerts to ensure comprehensive security monitoring and response
Note: Once you begin the lab, you will not be able to pause, save, or return to your lab. Please ensure that you have set aside enough time to complete the lab before you start.
