Hugo P.Brito
a491a50afd
Merge remote-tracking branch 'origin/master' into HEAD
...
# Conflicts:
# prowler/CHANGELOG.md
# prowler/compliance/m365/iso27001_2022_m365.json
# prowler/providers/m365/services/entra/entra_service.py
2026-04-08 11:50:37 +01:00
Hugo P.Brito
6451740b27
fix(sdk): preserve entra platform condition compatibility
...
- Keep platform condition aliases compatible with existing checks
- Normalize platform values before evaluating unknown-device blocks
- Update tests to cover mixed casing and alias-based input
2026-04-07 15:28:49 +01:00
Hugo Pereira Brito and Daniel Barranquero
ab00c2dce1
feat(m365): add entra_conditional_access_policy_block_elevated_insider_risk security check ( #10234 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-30 17:27:00 +02:00
3b875484b0
feat(m365): add device registration MFA and harden Intune enrollment CA check ( #10222 )
...
Co-authored-by: Hugo Brito <hugopbrito@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-30 13:36:05 +02:00
Hugo Pereira Brito and Daniel Barranquero
7148086410
feat(m365): add entra_conditional_access_policy_block_o365_elevated_insider_risk security check ( #10232 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-30 11:49:29 +02:00
Hugo Pereira Brito and Daniel Barranquero
c651f60e3a
feat(m365): add entra_conditional_access_policy_mdm_compliant_device_required check ( #10220 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-26 11:36:30 +01:00
Hugo Pereira Brito
534ad3d04f
feat(m365): add entra_device_code_flow_blocked security check ( #10218 )
2026-03-13 11:31:47 +01:00
Hugo Pereira Brito and Daniel Barranquero
9cf63a2a68
feat(m365): add custom entra_conditional_access_policy_compliant_device_hybrid_joined_device_mfa_required check ( #10197 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-05 18:11:20 +01:00
Hugo Pereira Brito and Daniel Barranquero
726b5665d0
feat(m365): add entra_conditional_access_policy_approved_client_app_required_for_mobile security check ( #10216 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-05 10:58:18 +01:00
Hugo Pereira Brito and Daniel Barranquero
e96ea54f3b
feat(m365): add entra_break_glass_users_fido2_security_key_registered security check ( #10213 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2026-03-03 13:58:44 +01:00
HugoPBrito
11ff512607
feat(m365): add entra_conditional_access_policy_unknown_device_blocked security check
...
Add new security check entra_conditional_access_policy_unknown_device_blocked for m365 provider.
Includes check implementation, metadata, and unit tests.
2026-03-03 13:28:35 +01:00
Hugo Pereira Brito
548a137046
feat(m365): add entra_authentication_method_sms_voice_disabled security check ( #10212 )
2026-03-03 13:08:02 +01:00
Andoni Alonso
efcbbf63c2
docs: review and fix documentation coverage for provider CLI flags ( #10040 )
2026-03-03 09:57:05 +01:00
Hugo Pereira Brito
07dea4f402
refactor(m365): rename conditional access policy checks to include policy prefix ( #10217 )
2026-03-02 13:41:24 +01:00
Andoni Alonso and HugoPBrito
c8ce590039
feat(m365): add entra_default_app_management_policy_enabled security check ( #9898 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-26 16:14:29 +01:00
Andoni Alonso and HugoPBrito
df09b14c75
feat(m365): add entra_all_apps_conditional_access_coverage security check ( #9902 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-26 11:37:09 +01:00
Hugo Pereira Brito and Andoni Alonso
db1db7d366
feat(m365): add entra_require_mfa_for_management_api security check ( #10150 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-02-25 12:29:23 +01:00
Hugo Pereira Brito
6935c4eb1b
feat(m365): add entra_app_enforced_restrictions security check ( #10058 )
2026-02-25 11:53:35 +01:00
Andoni Alonso and HugoPBrito
75d01efc0d
feat(m365): add entra_conditional_access_policy_emergency_access_exclusion security check ( #9903 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-24 11:35:31 +01:00
ea60f2d082
feat(m365): add defenderxdr_critical_asset_management_pending_approvals security check ( #10085 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:49:41 +01:00
e8c0a37d50
feat(m365): add entra_seamless_sso_disabled security check ( #10086 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:19:07 +01:00
Hugo Pereira Brito and Copilot Autofix powered by AI
48b94b2a9f
feat(m365): add defenderxdr_endpoint_privileged_user_exposed_credentials security check ( #10084 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-02-19 17:52:16 +01:00
20b26bc7d0
feat(m365): add entra_app_registration_no_unused_privileged_permissions security check ( #10080 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-19 17:12:50 +01:00
Hugo Pereira Brito
23e51158e0
feat(m365): add defenderidentity_health_issues_no_open security check ( #10087 )
2026-02-19 16:58:08 +01:00
Andoni Alonso and HugoPBrito
fce1e4f3d2
feat(m365): add defender_safe_attachments_policy_enabled security check ( #9833 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-11 15:42:11 +01:00
Andoni Alonso and HugoPBrito
5d490fa185
feat(m365): add defender_atp_safe_attachments_and_docs_configured security check ( #9837 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-11 15:21:06 +01:00
Andoni Alonso and HugoPBrito
c5f7e80b20
feat(m365): add defender_safelinks_policy_enabled security check ( #9832 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-11 13:03:32 +01:00
3d6aa6c650
feat(m365): add defender_zap_for_teams_enabled security check ( #9838 )
...
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-26 17:34:10 +01:00
Andoni Alonso
7f4c02c738
feat(m365): add exchange_shared_mailbox_sign_in_disabled check ( #9828 )
2026-01-26 16:00:28 +01:00
Hugo Pereira Brito
1bf49747ad
chore(entra): enhance performance for user_registration_details and user mfa evaluation ( #9236 )
2026-01-14 14:01:51 +01:00
mattkeeler and HugoPBrito
dc9e91ac4e
fix(m365): Support multiple Exchange mailbox policies ( #9241 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2025-11-27 14:10:15 +01:00
Hugo Pereira Brito
880345bebe
fix(sharepoint): false positives on disabled external sharing ( #9298 )
2025-11-26 12:23:04 +01:00
Hugo Pereira Brito
1292abcf91
fix(m365_powershell): restore MSAL.PS ( #9210 )
2025-11-11 15:35:45 +01:00
Hugo Pereira Brito
73a277f27b
chore(m365_powershell): remove unnecessary test_credentials ( #9204 )
2025-11-11 10:16:57 +01:00
Hugo Pereira Brito
ef4e28da03
fix(m365_powershell): teams connection with --sp-env-auth and enhanced timeouts error logging ( #9191 )
2025-11-10 11:23:56 +01:00
Hugo Pereira Brito
fb9eda208e
fix(powershell): depth truncation and parsing error ( #9181 )
2025-11-07 13:19:37 +01:00
Hugo Pereira Brito and César Arroba
885ee62062
fix(m365): admincenter service unnecessary msgraph calls and repeated resource_id ( #9019 )
...
Co-authored-by: César Arroba <cesar@prowler.com >
2025-10-29 14:50:25 +01:00
Daniel Barranquero
3d1e7015a6
fix(entra): value errors due tu enums ( #8919 )
2025-10-23 11:36:51 +02:00
Hugo Pereira Brito
ecf749fce8
chore(m365): deprecate user auth ( #8865 )
2025-10-09 12:24:24 +02:00
Hugo Pereira Brito
c7d7ec9a3b
fix: add pagination for m365 and azure users retrieval ( #8858 )
2025-10-08 09:07:18 +02:00
Hugo Pereira Brito
ad3d4536fb
fix(m365): only evaluate enabled users in entra_users_mfa_capable ( #8544 )
2025-08-20 16:45:00 +02:00
Hugo Pereira Brito and Sergio Garcia
85af4ff77c
feat(m365): add certificate auth method to cli ( #8404 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-08-11 09:47:56 +02:00
Daniel Barranquero
dcee114ef3
fix: validation errors in azure and m365 ( #8368 )
2025-08-11 09:42:30 +02:00
Hugo Pereira Brito
b63f70ac82
fix(m365): enhance execution to avoid multiple error calls ( #8353 )
2025-07-30 14:54:27 +08:00
Daniel Barranquero
dd713351dc
fix(defender): avoid duplicated findings in check defender_domain_dkim_enabled ( #8334 )
2025-07-21 13:07:26 +02:00
Pedro Martín and Pepe Fagoaga
c4a9280ebb
fix(m365): handle tenant_id in mutelist ( #8306 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-07-17 12:37:13 +02:00
74940e1fc4
fix(check_metadata): add service name validator ( #8289 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2025-07-17 13:10:30 +05:45
Hugo Pereira Brito
19e35bf9a8
feat: add new check entra_intune_enrollment_sign_in_frequency_every_time ( #8223 )
2025-07-16 17:13:50 +02:00
Daniel Barranquero
f0ed866946
fix(entra): entra_users_mfa_capable check report ( #8288 )
2025-07-16 16:06:36 +08:00
32f3787e18
feat(m365powershell): add pwsh authentication via service principal ( #7992 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-06-30 18:42:18 +08:00
Hugo P.Brito