Cyber Home Lab from ZERO and Catch Attackers! Free, Easy, and REAL (Microsoft Sentinel 2025)

Video Description

🔐 Cyber Internships + HQ Labs + Community 🔐 https://skool.com/cyber-range ✅ Complete Lab Checklist ✅ https://docs.google.com/document/d/143seB9PwT9GSsStc14vPQWgnCHQeVMVEC6XBRz67p_Q/edit?tab=t.0 ————— 0:00 Intro 2:06 Create Free Azure Subscription 5:29 Create Virtual Machine 23:16 Viewing Raw Logs on the Virtual Machine 27:36 Creating Our Log Repository - Log Analytics Workspace 30:40 Connecting our VM to Log Analytics Workspace 37:35 Querying Our Log Repository with KQL 45:51 Uploading our Geolocation Data to the SIEM 50:16 Inspecting our Enriched Logs - We can see where the attackers are 55:33 Creating our Attack Map 01:01:15 Beyond the lab - Creating Incidents ————— In this video, we set up a basic home SOC in Azure from scratch. Using a free Azure subscription, we walk through creating a virtual machine (VM), opening it to the internet as a honeypot, and forwarding logs to a central repository. We then integrate Microsoft Sentinel to analyze real-world attack data. We cover: - Creating an Azure subscription and setting up a VM - Configuring Log Analytics Workspace - Forwarding logs and integrating with Sentinel - Querying failed login attempts and visualizing attack sources - Building an attack map to track real-time hacker activity This project is great for cybersecurity beginners and professionals looking to practice log analysis, threat detection, and SOC operations in a real-world cloud environment.