Beginner Threat Hunting with Sysmon – What Should I Learn Next?

I'm a begginer I just started learning threat hunting and finished my first hands-on practice using Sysmon. I simulated basic PowerShell commands through CMD, and manually analyzed the logs in Event Viewer to familiarize myself in sysmon.

my next task after familiarizing myself to sysmon is to use splunk, does this hands on practice is good?

Would love any advice from blue team pros. Thanks!