Hugo P.Brito
a491a50afd
Merge remote-tracking branch 'origin/master' into HEAD
...
# Conflicts:
# prowler/CHANGELOG.md
# prowler/compliance/m365/iso27001_2022_m365.json
# prowler/providers/m365/services/entra/entra_service.py
2026-04-08 11:50:37 +01:00
Hugo P.Brito
6451740b27
fix(sdk): preserve entra platform condition compatibility
...
- Keep platform condition aliases compatible with existing checks
- Normalize platform values before evaluating unknown-device blocks
- Update tests to cover mixed casing and alias-based input
2026-04-07 15:28:49 +01:00
Hugo Pereira Brito and Daniel Barranquero
ab00c2dce1
feat(m365): add entra_conditional_access_policy_block_elevated_insider_risk security check ( #10234 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-30 17:27:00 +02:00
3b875484b0
feat(m365): add device registration MFA and harden Intune enrollment CA check ( #10222 )
...
Co-authored-by: Hugo Brito <hugopbrito@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-30 13:36:05 +02:00
Hugo Pereira Brito and Daniel Barranquero
7148086410
feat(m365): add entra_conditional_access_policy_block_o365_elevated_insider_risk security check ( #10232 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-30 11:49:29 +02:00
Hugo Pereira Brito and Daniel Barranquero
c651f60e3a
feat(m365): add entra_conditional_access_policy_mdm_compliant_device_required check ( #10220 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-26 11:36:30 +01:00
Hugo Pereira Brito
534ad3d04f
feat(m365): add entra_device_code_flow_blocked security check ( #10218 )
2026-03-13 11:31:47 +01:00
Hugo Pereira Brito and Daniel Barranquero
9cf63a2a68
feat(m365): add custom entra_conditional_access_policy_compliant_device_hybrid_joined_device_mfa_required check ( #10197 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-05 18:11:20 +01:00
Hugo Pereira Brito and Daniel Barranquero
726b5665d0
feat(m365): add entra_conditional_access_policy_approved_client_app_required_for_mobile security check ( #10216 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-05 10:58:18 +01:00
Hugo Pereira Brito and Daniel Barranquero
e96ea54f3b
feat(m365): add entra_break_glass_users_fido2_security_key_registered security check ( #10213 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2026-03-03 13:58:44 +01:00
HugoPBrito
11ff512607
feat(m365): add entra_conditional_access_policy_unknown_device_blocked security check
...
Add new security check entra_conditional_access_policy_unknown_device_blocked for m365 provider.
Includes check implementation, metadata, and unit tests.
2026-03-03 13:28:35 +01:00
Hugo Pereira Brito
548a137046
feat(m365): add entra_authentication_method_sms_voice_disabled security check ( #10212 )
2026-03-03 13:08:02 +01:00
Hugo Pereira Brito
07dea4f402
refactor(m365): rename conditional access policy checks to include policy prefix ( #10217 )
2026-03-02 13:41:24 +01:00
Andoni Alonso and HugoPBrito
c8ce590039
feat(m365): add entra_default_app_management_policy_enabled security check ( #9898 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-26 16:14:29 +01:00
Andoni Alonso and HugoPBrito
df09b14c75
feat(m365): add entra_all_apps_conditional_access_coverage security check ( #9902 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-26 11:37:09 +01:00
Hugo Pereira Brito and Andoni Alonso
db1db7d366
feat(m365): add entra_require_mfa_for_management_api security check ( #10150 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-02-25 12:29:23 +01:00
Hugo Pereira Brito
6935c4eb1b
feat(m365): add entra_app_enforced_restrictions security check ( #10058 )
2026-02-25 11:53:35 +01:00
Andoni Alonso and HugoPBrito
75d01efc0d
feat(m365): add entra_conditional_access_policy_emergency_access_exclusion security check ( #9903 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-24 11:35:31 +01:00
ea60f2d082
feat(m365): add defenderxdr_critical_asset_management_pending_approvals security check ( #10085 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:49:41 +01:00
e8c0a37d50
feat(m365): add entra_seamless_sso_disabled security check ( #10086 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-02-19 18:19:07 +01:00
Hugo Pereira Brito and Copilot Autofix powered by AI
48b94b2a9f
feat(m365): add defenderxdr_endpoint_privileged_user_exposed_credentials security check ( #10084 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-02-19 17:52:16 +01:00
20b26bc7d0
feat(m365): add entra_app_registration_no_unused_privileged_permissions security check ( #10080 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-02-19 17:12:50 +01:00
Hugo Pereira Brito
23e51158e0
feat(m365): add defenderidentity_health_issues_no_open security check ( #10087 )
2026-02-19 16:58:08 +01:00
Andoni Alonso and HugoPBrito
fce1e4f3d2
feat(m365): add defender_safe_attachments_policy_enabled security check ( #9833 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-11 15:42:11 +01:00
Andoni Alonso and HugoPBrito
5d490fa185
feat(m365): add defender_atp_safe_attachments_and_docs_configured security check ( #9837 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-11 15:21:06 +01:00
Andoni Alonso and HugoPBrito
c5f7e80b20
feat(m365): add defender_safelinks_policy_enabled security check ( #9832 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-02-11 13:03:32 +01:00
3d6aa6c650
feat(m365): add defender_zap_for_teams_enabled security check ( #9838 )
...
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-26 17:34:10 +01:00
Andoni Alonso
7f4c02c738
feat(m365): add exchange_shared_mailbox_sign_in_disabled check ( #9828 )
2026-01-26 16:00:28 +01:00
Hugo Pereira Brito
1bf49747ad
chore(entra): enhance performance for user_registration_details and user mfa evaluation ( #9236 )
2026-01-14 14:01:51 +01:00
mattkeeler and HugoPBrito
dc9e91ac4e
fix(m365): Support multiple Exchange mailbox policies ( #9241 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2025-11-27 14:10:15 +01:00
Hugo Pereira Brito
880345bebe
fix(sharepoint): false positives on disabled external sharing ( #9298 )
2025-11-26 12:23:04 +01:00
Hugo Pereira Brito and César Arroba
885ee62062
fix(m365): admincenter service unnecessary msgraph calls and repeated resource_id ( #9019 )
...
Co-authored-by: César Arroba <cesar@prowler.com >
2025-10-29 14:50:25 +01:00
Daniel Barranquero
3d1e7015a6
fix(entra): value errors due tu enums ( #8919 )
2025-10-23 11:36:51 +02:00
Hugo Pereira Brito
c7d7ec9a3b
fix: add pagination for m365 and azure users retrieval ( #8858 )
2025-10-08 09:07:18 +02:00
Hugo Pereira Brito
ad3d4536fb
fix(m365): only evaluate enabled users in entra_users_mfa_capable ( #8544 )
2025-08-20 16:45:00 +02:00
Daniel Barranquero
dcee114ef3
fix: validation errors in azure and m365 ( #8368 )
2025-08-11 09:42:30 +02:00
Daniel Barranquero
dd713351dc
fix(defender): avoid duplicated findings in check defender_domain_dkim_enabled ( #8334 )
2025-07-21 13:07:26 +02:00
Hugo Pereira Brito
19e35bf9a8
feat: add new check entra_intune_enrollment_sign_in_frequency_every_time ( #8223 )
2025-07-16 17:13:50 +02:00
Daniel Barranquero
f0ed866946
fix(entra): entra_users_mfa_capable check report ( #8288 )
2025-07-16 16:06:36 +08:00
Hugo Pereira Brito
12987ec9f9
fix(admincenter): service and group visibility ( #7870 )
2025-05-28 16:48:49 +02:00
Matt Keeler
2dd6be59b9
fix(m365): add compliantDevice grant control support ( #7844 )
2025-05-28 09:05:00 +02:00
Matt Keeler
02ca82004f
fix(typo): minor language updates ( #7843 )
2025-05-27 09:26:51 +02:00
Hugo Pereira Brito and Andoni A.
6e184dae93
fix(admincenter): admincenter_users_admins_reduced_license_footprint logic ( #7779 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2025-05-21 12:46:35 +02:00
Hugo Pereira Brito and Andoni Alonso
4e84507130
feat(entra): add new check entra_users_mfa_capable ( #7734 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-05-21 10:31:56 +02:00
Daniel Barranquero and Andoni Alonso
9b127eba93
feat(admincenter): add new check admincenter_external_calendar_sharing_disabled ( #7733 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-05-21 09:14:45 +02:00
Daniel Barranquero and Andoni Alonso
84749df708
feat(admincenter): add new check admincenter_organization_customer_lockbox_enabled ( #7732 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-05-21 08:48:36 +02:00
1a8df3bf18
fix(defender): enhance policies checks logic ( #7666 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-05-12 17:02:30 +02:00
e5ca51d1e7
feat(teams): add new checks teams_security_reporting_enabled and defender_chat_report_policy_configured ( #7614 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2025-05-06 11:30:00 +02:00
Daniel Barranquero
e2fd3fe36e
feat(defender): add new check defender_malware_policy_comprehensive_attachments_filter_applied ( #7661 )
2025-05-06 10:29:36 +02:00
Daniel Barranquero and MrCloudSec
6b0d73d7f9
feat(exchange): make exchange_user_mailbox_auditing_enabled check configurable ( #7662 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-05-05 15:16:41 -04:00
Hugo P.Brito