These labs cover Detection in Microsoft Entra ID. Work through them in the order shown. Each one lists its prerequisites, the PowerShell you will run, and how to check the change worked.
New to the topic? Read the lab prerequisites and IAM Foundations first.
About Detection labs
How many Detection labs are there?
There is 1 Detection lab on Identity Bytes Labs, taking about 1.7 hours in total.
Where should I start with Detection?
Start with "Defender Identity Protection". Connect Entra risk signals to a repeatable, documented response instead of an inbox full of alerts.
Do I need a production tenant?
No. Every lab is designed for a free, disposable Microsoft Entra test tenant. Never run lab steps against an environment people depend on.