|
a2824f7166
|
feat(stackit): add new provider with 4 checks (#9237)
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-05-28 13:16:38 +02:00 |
|
|
|
7a7c828fc7
|
feat(m365/entra): add entra_app_registration_client_secret_unused check (consolidates #11097 and #11212) (#11232)
Co-authored-by: shadyfox <git@twink.energy>
Co-authored-by: Oleksandr Yizchak Sanin <alexaaander.sanin@gmail.com>
|
2026-05-19 15:14:32 +01:00 |
|
|
abdouandHugo P.Brito
|
7f3dcdf02f
|
fix(m365): surface AuditLog.Read.All permission errors instead of false positives (#10907)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-05-12 18:22:19 +01:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
1b99550572
|
feat(m365): add entra_service_principal_no_secrets_for_permanent_tier0_roles security check (#10788)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-05-12 10:45:32 +01:00 |
|
|
Hugo Pereira Brito
|
80482da1cb
|
refactor(m365): scope entra_emergency_access_exclusion to Block-grant policies (#10849)
|
2026-05-12 10:40:46 +01:00 |
|
|
Hugo Pereira Brito
|
1b0e12ec51
|
fix(m365): exclude disabled guest users from entra_users_mfa_capable (#11002)
|
2026-05-12 08:35:24 +01:00 |
|
|
Hugo Pereira Brito
|
e252058af4
|
fix(m365): exclude guest users from entra_users_mfa_capable (#10785)
|
2026-04-28 08:58:16 +01:00 |
|
|
Daniel Barranquero
|
368d9c1519
|
fix(admincenter): restrict admincenter group visibility check to Unified groups (#10899)
|
2026-04-27 13:23:03 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
a82eaa885d
|
refactor(m365): normalize CA platforms at model level (#10635)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 15:00:23 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
90a619a8b4
|
feat(m365): add entra_conditional_access_policy_block_unknown_device_platforms security check (#10615)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 14:32:37 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
638bf62d76
|
feat(entra): directory sync account exclusion (#10620)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 14:16:32 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
5610f5ad90
|
feat(m365): add entra_conditional_access_policy_corporate_device_sign_in_frequency_enforced security check (#10618)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 14:10:00 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
92b838866a
|
feat(m365): add entra_conditional_access_policy_mfa_enforced_for_guest_users security check (#10616)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 13:45:12 +02:00 |
|
|
Hugo Pereira Brito
|
e24e1ab771
|
feat(m365): add exchange_organization_delicensing_resiliency_enabled security check (#10608)
|
2026-04-14 13:30:45 +02:00 |
|
|
Hugo Pereira Brito
|
bc3fd79457
|
feat(intune): add device compliance policy marks noncompliant check (#10599)
|
2026-04-14 13:01:47 +02:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
4941ed5797
|
feat(entra): add new check entra_conditional_access_policy_all_apps_all_users (#10619)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-04-14 12:47:57 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
ab00c2dce1
|
feat(m365): add entra_conditional_access_policy_block_elevated_insider_risk security check (#10234)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-30 17:27:00 +02:00 |
|
|
|
3b875484b0
|
feat(m365): add device registration MFA and harden Intune enrollment CA check (#10222)
Co-authored-by: Hugo Brito <hugopbrito@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-30 13:36:05 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
7148086410
|
feat(m365): add entra_conditional_access_policy_block_o365_elevated_insider_risk security check (#10232)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-30 11:49:29 +02:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
c651f60e3a
|
feat(m365): add entra_conditional_access_policy_mdm_compliant_device_required check (#10220)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-26 11:36:30 +01:00 |
|
|
Hugo Pereira Brito
|
534ad3d04f
|
feat(m365): add entra_device_code_flow_blocked security check (#10218)
|
2026-03-13 11:31:47 +01:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
9cf63a2a68
|
feat(m365): add custom entra_conditional_access_policy_compliant_device_hybrid_joined_device_mfa_required check (#10197)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-05 18:11:20 +01:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
726b5665d0
|
feat(m365): add entra_conditional_access_policy_approved_client_app_required_for_mobile security check (#10216)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-05 10:58:18 +01:00 |
|
|
Hugo Pereira BritoandDaniel Barranquero
|
e96ea54f3b
|
feat(m365): add entra_break_glass_users_fido2_security_key_registered security check (#10213)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2026-03-03 13:58:44 +01:00 |
|
|
Hugo Pereira Brito
|
548a137046
|
feat(m365): add entra_authentication_method_sms_voice_disabled security check (#10212)
|
2026-03-03 13:08:02 +01:00 |
|
|
Hugo Pereira Brito
|
07dea4f402
|
refactor(m365): rename conditional access policy checks to include policy prefix (#10217)
|
2026-03-02 13:41:24 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
c8ce590039
|
feat(m365): add entra_default_app_management_policy_enabled security check (#9898)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-26 16:14:29 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
df09b14c75
|
feat(m365): add entra_all_apps_conditional_access_coverage security check (#9902)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-26 11:37:09 +01:00 |
|
|
Hugo Pereira BritoandAndoni Alonso
|
db1db7d366
|
feat(m365): add entra_require_mfa_for_management_api security check (#10150)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
|
2026-02-25 12:29:23 +01:00 |
|
|
Hugo Pereira Brito
|
6935c4eb1b
|
feat(m365): add entra_app_enforced_restrictions security check (#10058)
|
2026-02-25 11:53:35 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
75d01efc0d
|
feat(m365): add entra_conditional_access_policy_emergency_access_exclusion security check (#9903)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-24 11:35:31 +01:00 |
|
|
|
ea60f2d082
|
feat(m365): add defenderxdr_critical_asset_management_pending_approvals security check (#10085)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-02-19 18:49:41 +01:00 |
|
|
|
e8c0a37d50
|
feat(m365): add entra_seamless_sso_disabled security check (#10086)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-02-19 18:19:07 +01:00 |
|
|
Hugo Pereira BritoandCopilot Autofix powered by AI
|
48b94b2a9f
|
feat(m365): add defenderxdr_endpoint_privileged_user_exposed_credentials security check (#10084)
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
|
2026-02-19 17:52:16 +01:00 |
|
|
|
20b26bc7d0
|
feat(m365): add entra_app_registration_no_unused_privileged_permissions security check (#10080)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-02-19 17:12:50 +01:00 |
|
|
Hugo Pereira Brito
|
23e51158e0
|
feat(m365): add defenderidentity_health_issues_no_open security check (#10087)
|
2026-02-19 16:58:08 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
fce1e4f3d2
|
feat(m365): add defender_safe_attachments_policy_enabled security check (#9833)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-11 15:42:11 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
5d490fa185
|
feat(m365): add defender_atp_safe_attachments_and_docs_configured security check (#9837)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-11 15:21:06 +01:00 |
|
|
Andoni AlonsoandHugoPBrito
|
c5f7e80b20
|
feat(m365): add defender_safelinks_policy_enabled security check (#9832)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-02-11 13:03:32 +01:00 |
|
|
|
3d6aa6c650
|
feat(m365): add defender_zap_for_teams_enabled security check (#9838)
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-01-26 17:34:10 +01:00 |
|
|
Andoni Alonso
|
7f4c02c738
|
feat(m365): add exchange_shared_mailbox_sign_in_disabled check (#9828)
|
2026-01-26 16:00:28 +01:00 |
|
|
Hugo Pereira Brito
|
1bf49747ad
|
chore(entra): enhance performance for user_registration_details and user mfa evaluation (#9236)
|
2026-01-14 14:01:51 +01:00 |
|
|
mattkeelerandHugoPBrito
|
dc9e91ac4e
|
fix(m365): Support multiple Exchange mailbox policies (#9241)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2025-11-27 14:10:15 +01:00 |
|
|
Hugo Pereira Brito
|
880345bebe
|
fix(sharepoint): false positives on disabled external sharing (#9298)
|
2025-11-26 12:23:04 +01:00 |
|
|
Hugo Pereira BritoandCésar Arroba
|
885ee62062
|
fix(m365): admincenter service unnecessary msgraph calls and repeated resource_id (#9019)
Co-authored-by: César Arroba <cesar@prowler.com>
|
2025-10-29 14:50:25 +01:00 |
|
|
Daniel Barranquero
|
3d1e7015a6
|
fix(entra): value errors due tu enums (#8919)
|
2025-10-23 11:36:51 +02:00 |
|
|
Hugo Pereira Brito
|
c7d7ec9a3b
|
fix: add pagination for m365 and azure users retrieval (#8858)
|
2025-10-08 09:07:18 +02:00 |
|
|
Hugo Pereira Brito
|
ad3d4536fb
|
fix(m365): only evaluate enabled users in entra_users_mfa_capable (#8544)
|
2025-08-20 16:45:00 +02:00 |
|
|
Daniel Barranquero
|
dcee114ef3
|
fix: validation errors in azure and m365 (#8368)
|
2025-08-11 09:42:30 +02:00 |
|
|
Daniel Barranquero
|
dd713351dc
|
fix(defender): avoid duplicated findings in check defender_domain_dkim_enabled (#8334)
|
2025-07-21 13:07:26 +02:00 |
|