Skip to main content Link Menu Expand (external link) Document Search Copy Copied
TechWorkshop Understanding Sentinel datalake and graph

Task 02: Verify cleanup

Introduction

After deletion completes, confirm that all resources and associated services are removed from your subscription.

Description

You’ll verify that no Sentinel workspaces, storage accounts, or virtual machines remain active.

Success criteria

  • No active Sentinel workspaces or virtual machines remain in the portal.
  • Azure costs for the lab are stopped.

  1. In the Azure portal search bar, type Microsoft Sentinel and verify no active workspaces are listed.

  2. Search for Virtual machines and confirm that vm-sentinel-lab no longer exists.

  3. Search for Storage accounts and confirm that sentinelstor@lab.LabInstance.Id no longer appears.

  4. Search for Log Analytics workspaces to ensure that law-sentinel-xdr-lab and law-custom-sentinel-lab (if created) are removed.

If any resources remain, verify that they belong to a different resource group or subscription before deleting them manually.

Completion

You’ve successfully cleaned up your environment. This concludes the Microsoft Sentinel XDR and Data Lake Integration lab series.

All Exercises Complete

You’ve successfully completed the lab.