Merge pull request #50843 from KenMAG/main

Updated exercise unit to use Server 2022.

Author: JamesJBarnett

learn-pr/wwl-sci/hunt-threats-sentinel/2-exercise-setup.yml

@@ -3,8 +3,8 @@ uid: learn.azure.hunt-threats-sentinel.2-exercise-setup
 metadata: 
   title: Exercise setup
   description: Learn how to set up your Azure resources to hunt threats using Microsoft Sentinel.
-  ms.date: 05/25/2023
-  author: wwlpublish
+  ms.date: 06/09/2025
+  author: KenMAG
   ms.author: kelawson
   ms.topic: unit
   ms.custom:

learn-pr/wwl-sci/hunt-threats-sentinel/includes/2-exercise-setup.md

@@ -22,10 +22,12 @@ To deploy the prerequisites for the exercise, perform the following tasks.
     | **Workspace name**  | Provide a unique name for the Microsoft Sentinel workspace, such as `<yourName>-sentinel`, where *\<yourName>* represents the workspace name that you chose in the previous task. |
     | **Location** | Accept the default value **[resourceGroup().location]**. |
     | **Simplevm Name** | Accept the default value **simple-vm**. |
-    | **Simplevm Windows OS Version** | Accept the default value **2016-Datacenter**.|
+    | **Simplevm Windows OS Version** | Accept the default value **2022-Datacenter**.|
 
 1. Select **Review + create**, and then select **Create**.
 
+   :::image type="content" source="../media/02-custom-deployment.png" alt-text="Screenshot of the Custom Deployment page." border="true":::
+
     > [!NOTE]
     > Wait for the deployment to finish. The deployment should take less than five minutes.
 

learn-pr/wwl-sci/hunt-threats-sentinel/index.yml

@@ -3,8 +3,8 @@ uid: learn.azure.hunt-threats-sentinel
 metadata:
   title: Threat hunting with Microsoft Sentinel
   description: Learn how to proactively identify threat behaviors by using Microsoft Sentinel queries.
-  ms.date: 03/06/2025
-  author: wwlpublish
+  ms.date: 06/09/2025
+  author: KenMAG
   ms.author: kelawson
   ms.topic: module
   ms.service: microsoft-sentinel