Create a SIEM in Azure

Create resource group - RG-Soc-lab

Create Virtual Network

Create the VM for the Honey Pot

Open the NSG (Network Security Group) to the internet.

Create an inbound rule allowing all traffic.

RDP into the machine and disable Windows Defender.

Create a log repo - log analytics workspace.

Create a sentinel instance and Link LAW (Log Analytics Workspace)

Create heat map