Merge pull request #50840 from KenMAG/main

updated exercise unit to use Server 2022

Author: JamesJBarnett

learn-pr/wwl-sci/analyze-data-in-sentinel/2-exercise-setup.yml

@@ -4,7 +4,7 @@ title: Exercise - Detect threats with Microsoft Sentinel analytics
 metadata:
   title: Exercise - Detect threats with Microsoft Sentinel analytics
   description: "Detect threats by using Microsoft Sentinel Analytics."
-  ms.date: 05/23/2025
+  ms.date: 06/09/2025
   author: KenMAG
   ms.author: kelawson
   ms.topic: unit

learn-pr/wwl-sci/analyze-data-in-sentinel/includes/2-exercise-setup.md

@@ -25,13 +25,13 @@ To deploy the prerequisites for the exercise, perform the following tasks.
     | Workspace Name  | Provide a unique name for the Microsoft Sentinel Workspace such as `<yourName>-sentinel`, where *\<yourName>* represents the workspace name that you chose in the previous task. |
     | Location | Accept the default value of **[resourceGroup().location]**. |
     | Simplevm Name | Accept the default value of **simple-vm**. |
-    | Simplevm Windows OS Version | Accept the default value of **2016-Datacenter**. |
+    | Simplevm Windows OS Version | Accept the default value of **2022-Datacenter**. |
 
 1. Select the **Review + create**. When validation passes, select **Create**.
 
     :::image type="content" source="../media/02-custom-deployment.png" alt-text="Screenshot of the Custom Deployment page." border="true":::
 
-    > [!Note]
+    > [!NOTE]
     > Wait for the deployment to complete. The deployment should take less than five minutes.
 
 ## Task 2: Check the resources created

learn-pr/wwl-sci/analyze-data-in-sentinel/index.yml

@@ -3,7 +3,7 @@ uid: learn.azure.analyze-data-in-sentinel
 metadata:
   title: Threat detection with Microsoft Sentinel analytics
   description: "Threat detection with Microsoft Sentinel analytics"
-  ms.date: 05/23/2025
+  ms.date: 06/09/2025
   author: KenMAG
   ms.author: kelawson
   ms.topic: module