 Daniel Barranquero
|
51c5fa7168
|
fix(checks): report MANUAL instead of FAIL on permission and data-availability errors (#12645)
|
2026-09-01 17:16:56 +02:00 |
|
|
|
9898cf7364
|
feat(m365): add defender_domain_dmarc_records_published check (#11936)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: hdy2001 <56308320+hdy2001@users.noreply.github.com>
|
2026-08-24 16:49:36 +02:00 |
|
|
|
ce037318cd
|
feat(m365): add CIS M365 v7.0.0 entra authentication method, PIM and access review checks (#12155)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-08-10 15:37:48 +01:00 |
|
|
Pedro MartínandHugo P.Brito
|
356036fe1f
|
feat(m365): add CIS M365 v7.0.0 entra conditional access and session checks (#12154)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-08-10 11:17:19 +01:00 |
|
|
Hugo Pereira Brito
|
3ca3a977a9
|
test(m365): avoid Lob secret pattern in test name (#12395)
|
2026-08-10 08:35:28 +01:00 |
|
|
Pedro MartínandHugo P.Brito
|
f2a00f19aa
|
feat(m365): add CIS M365 v7.0.0 entra password protection and default user permission checks (#12153)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-08-07 13:42:52 +01:00 |
|
|
Pedro MartínandDaniel Barranquero
|
aaa29d3528
|
feat(m365): add CIS M365 v7.0.0 entra device registration checks (#12152)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-05 13:51:29 +02:00 |
|
|
Pedro MartínandDaniel Barranquero
|
f87522e423
|
feat(m365): add CIS M365 v7.0.0 teams external access check (#12151)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-05 12:24:44 +02:00 |
|
|
Pedro MartínandDaniel Barranquero
|
90905dcc9f
|
feat(m365): add CIS M365 v7.0.0 exchange checks (#12149)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 13:37:28 +02:00 |
|
|
Pedro MartínandDaniel Barranquero
|
0f39665ece
|
feat(m365): add CIS M365 v7.0.0 defender preset policy checks (#12148)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 11:31:50 +02:00 |
|
|
Pedro MartínandDaniel Barranquero
|
b3d174d0c1
|
feat(m365): add CIS M365 v7.0.0 admincenter shared bookings check (#12147)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-08-04 09:46:47 +02:00 |
|
|
Hugo Pereira Brito
|
c6dae3a711
|
chore: remove __init__.py from test directories (#10582)
|
2026-07-13 15:09:42 +01:00 |
|
|
Maringanti Vasist AcharyaandHugo P.Brito
|
b6f74c7284
|
feat(m365): add exchange application access policy check (#11247)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-07-02 10:16:07 +01:00 |
|
|
Samyak ChoudharyandDaniel Barranquero
|
883ffa1fdb
|
feat(m365): add Entra Conditional Access group management restriction (#11342)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-07-01 11:38:54 +02:00 |
|
|
|
d62abeb407
|
feat(m365): add entra_conditional_access_policy_no_exclusion_gaps check (#11577)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Ariel Eli <207917221+arieleli01212@users.noreply.github.com>
|
2026-06-24 17:03:15 +02:00 |
|
|
|
93dd696a4f
|
feat(m365): add Azure DevOps Conditional Access check (#11182)
Co-authored-by: Atlas-BountyHunter <atlas-bounty@hermes-agent.local>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-24 13:33:51 +02:00 |
|
|
Zeus AlmighteeandDaniel Barranquero
|
e8ffe59ce2
|
feat(m365/entra): add entra_conditional_access_policy_no_deleted_object_references check (#11236)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-17 16:16:49 +02:00 |
|
|
|
8d4ec561c2
|
feat(m365): add check for directory sync object takeover protection (#11098)
Co-authored-by: shadyfox <git@twink.energy>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: omobolaji adeyan <omobolaji.adeyan@gmail.com>
|
2026-06-17 12:15:14 +02:00 |
|
|
|
e710ebff1c
|
feat(m365): add exchange_mailbox_primary_smtp_custom_domain check (#11215)
Co-authored-by: Jasmine Sullivan <20147180@tafe.wa.edu.au>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-09 16:24:25 +02:00 |
|
|
Hugo Pereira Brito
|
b3caee88e4
|
fix(m365): skip future hires in MFA capable check (#11511)
|
2026-06-09 15:42:06 +02:00 |
|
|
Hugo Pereira Brito
|
d9f90e50b8
|
fix(m365): paginate admincenter group enumeration (#11510)
|
2026-06-09 15:23:35 +02:00 |
|
|
AshishraymajhiandDaniel Barranquero
|
7e60e8f8da
|
feat(m365): add entra_service_prinicipal_privileged_role_no_owners_check (#11189)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-06-09 11:29:03 +02:00 |
|
|
|
a2824f7166
|
feat(stackit): add new provider with 4 checks (#9237)
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-05-28 13:16:38 +02:00 |
|
|
Pedro Martín
|
723d161c63
|
fix(az-m365): asyncio.run() in Azure/M365 Celery worker event (#11360)
|
2026-05-26 11:26:39 +02:00 |
|
|
Sandiyo ChristanandHugo P.Brito
|
0fd952ae2b
|
chore(m365): use PowerShell best practices for quoting credential variables (#9997)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-05-21 15:17:23 +01:00 |
|
|
|
7a7c828fc7
|
feat(m365/entra): add entra_app_registration_client_secret_unused check (consolidates #11097 and #11212) (#11232)
Co-authored-by: shadyfox <git@twink.energy>
Co-authored-by: Oleksandr Yizchak Sanin <alexaaander.sanin@gmail.com>
|
2026-05-19 15:14:32 +01:00 |
|
|
abdouandHugo P.Brito
|
7f3dcdf02f
|
fix(m365): surface AuditLog.Read.All permission errors instead of false positives (#10907)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-05-12 18:22:19 +01:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
1b99550572
|
feat(m365): add entra_service_principal_no_secrets_for_permanent_tier0_roles security check (#10788)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-05-12 10:45:32 +01:00 |
|
|
Hugo Pereira Brito
|
80482da1cb
|
refactor(m365): scope entra_emergency_access_exclusion to Block-grant policies (#10849)
|
2026-05-12 10:40:46 +01:00 |
|
|
Hugo Pereira Brito
|
1b0e12ec51
|
fix(m365): exclude disabled guest users from entra_users_mfa_capable (#11002)
|
2026-05-12 08:35:24 +01:00 |
|
|
Hugo Pereira Brito
|
e252058af4
|
fix(m365): exclude guest users from entra_users_mfa_capable (#10785)
|
2026-04-28 08:58:16 +01:00 |
|
|
Daniel Barranquero
|
368d9c1519
|
fix(admincenter): restrict admincenter group visibility check to Unified groups (#10899)
|
2026-04-27 13:23:03 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
a82eaa885d
|
refactor(m365): normalize CA platforms at model level (#10635)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 15:00:23 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
90a619a8b4
|
feat(m365): add entra_conditional_access_policy_block_unknown_device_platforms security check (#10615)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 14:32:37 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
638bf62d76
|
feat(entra): directory sync account exclusion (#10620)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 14:16:32 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
5610f5ad90
|
feat(m365): add entra_conditional_access_policy_corporate_device_sign_in_frequency_enforced security check (#10618)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 14:10:00 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
92b838866a
|
feat(m365): add entra_conditional_access_policy_mfa_enforced_for_guest_users security check (#10616)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 13:45:12 +02:00 |
|
|
Hugo Pereira Brito
|
e24e1ab771
|
feat(m365): add exchange_organization_delicensing_resiliency_enabled security check (#10608)
|
2026-04-14 13:30:45 +02:00 |
|
|
Hugo Pereira Brito
|
bc3fd79457
|
feat(intune): add device compliance policy marks noncompliant check (#10599)
|
2026-04-14 13:01:47 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
4941ed5797
|
feat(entra): add new check entra_conditional_access_policy_all_apps_all_users (#10619)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 12:47:57 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
ab00c2dce1
|
feat(m365): add entra_conditional_access_policy_block_elevated_insider_risk security check (#10234)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-30 17:27:00 +02:00 |
|
|
|
3b875484b0
|
feat(m365): add device registration MFA and harden Intune enrollment CA check (#10222)
Co-authored-by: Hugo Brito <hugopbrito@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-30 13:36:05 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
7148086410
|
feat(m365): add entra_conditional_access_policy_block_o365_elevated_insider_risk security check (#10232)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-30 11:49:29 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
c651f60e3a
|
feat(m365): add entra_conditional_access_policy_mdm_compliant_device_required check (#10220)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-26 11:36:30 +01:00 |
|
|
Hugo Pereira Brito
|
534ad3d04f
|
feat(m365): add entra_device_code_flow_blocked security check (#10218)
|
2026-03-13 11:31:47 +01:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
9cf63a2a68
|
feat(m365): add custom entra_conditional_access_policy_compliant_device_hybrid_joined_device_mfa_required check (#10197)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-05 18:11:20 +01:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
726b5665d0
|
feat(m365): add entra_conditional_access_policy_approved_client_app_required_for_mobile security check (#10216)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-05 10:58:18 +01:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
e96ea54f3b
|
feat(m365): add entra_break_glass_users_fido2_security_key_registered security check (#10213)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2026-03-03 13:58:44 +01:00 |
|
|
Hugo Pereira Brito
|
548a137046
|
feat(m365): add entra_authentication_method_sms_voice_disabled security check (#10212)
|
2026-03-03 13:08:02 +01:00 |
|
|
Andoni Alonso
|
efcbbf63c2
|
docs: review and fix documentation coverage for provider CLI flags (#10040)
|
2026-03-03 09:57:05 +01:00 |
|