Could someone advise me if it's possible to create my own small lab?

[CyberKing]

Hi, for some time now I've been learning about Sentinel and Defender. Could someone advise me if it's possible to create my own small lab?

I had everything set up because I have an 'MSDN Platforms Subscription' license. I have started trial

version of Sentinel and Defender + Microsoft 365 E5 Enterprise Mobility + Security E5

I was able to create everything as in a real environment until the Microsoft 365 E5 trial ended after

30days * not 100% sure if is just because of license ended?*

After that, I lost access to Email logs  (threat hunting in Defender or running custom rules etc..) -

Goal: Creating a lab environment where I can have 1x Outlook, 1x Teams, Defender, and Sentinel (there won't be many logs as it will be just for testing purposes, with only one virtual machine).

I'm wondering if it's possible for me to create such a lab. What could be the cost? Office 365 Enterprise E5 is $57, and it seems that I can't use the resources from MSDN, so I would need to purchase it using my own funds.

E5 trail for 30 days

90-day Defender for Office 365 trial at the Microsoft 365 Defender portal trials hub

Sentinel works fine after 31 days and status is Active and pricing tier is - pay as you go 

[#2]

You can create the lab, but as you found out, it cannot be a MSDN lab as M365 is not part of the Azure benefit that you get through MSDN. You would need to create the M365 and pay for it but that information could then be sent to your Sentinel environment that is part of your MSDN benefit.

[#3]

@GBushey

Thank you for your reply! You mention that i need to create the M365 so what this really means? Do i need licence e5? And something else?how much it will cost around? If you know, please let me know. If not i will try to Google it for more details. 

Other thing i managed to find out there is some kind of developer m365. Did you heard about that? 

https://youtu.be/M8P3CcWFSFs

[#4]

Depending on how much data, and from what sources, you would need to enable one of M365 licenses. Sadly, I am not that familiar with their licensing so you may need to either post in on of their techcommunity sites or do some more searching.

[#5]

Thanks for another comment, as I can see there is possibility to create free M365 E5 Developer Tenant to ( link above in my last reply)
I am thinking to create this one then sent data to my sentinel (MSDN).

" information could then be sent to your Sentinel environment that is part of your MSDN benefit."
1.What is the best way to do that?
2. I think in M365 E5 Developer Tenant I am unable to create Vms. I am wondering if i can sent logs from my MSDN account from vms and M365 E5 Developer Tenant logs email, siginin logs etc..to one workspace (Sentinel)

thanks!