Microsoft Sentinel To-Go is an open source project developed to expedite the deployment of an Microsoft Sentinel lab along with other Azure resources for research purposes. It also comes with the option to ingest pre-recorded datasets from the Security Datasets project right at deployment time.
There are a few things that you can do with this project. This project is intended for research purposes, so I highly recommend to create a new resource group in your subscription to not interfere with any other system in the same resource group. Take a look at the different scenarios that you can deploy in the section below.
A few deployments available through Microsoft Sentinel To-go!
- Microsoft Sentinel To-Go (Part 1): A lab w/ Prerecorded Data 😈 & a Custom Logs Pipe via ARM Templates 🚀
- Microsoft Sentinel To-Go (Part 2): Integrating a Basic Windows Lab 🧪 via ARM Templates 🚀
- Testing the New Version of the Windows Security Events Connector with Microsoft Sentinel To-Go!
- Microsoft Sentinel To-Go! A Linux 🐧 Lab with AUOMS Set Up to Learn About the OMI Vulnerability 💥
- Roberto Rodriguez (@Cyb3rWard0g)