prowler

entra_admin_consent_workflow_enabled

feat: adapt Microsoft365 provider to use PowerShell (#7331 )

2025-04-15 13:24:09 -04:00

entra_admin_portals_access_restriction

feat(m365): add entra_app_enforced_restrictions security check (#10058 )

2026-02-25 11:53:35 +01:00

entra_admin_users_cloud_only

feat: adapt Microsoft365 provider to use PowerShell (#7331 )

2025-04-15 13:24:09 -04:00

entra_admin_users_mfa_enabled

feat(m365): add entra_app_enforced_restrictions security check (#10058 )

2026-02-25 11:53:35 +01:00

entra_admin_users_phishing_resistant_mfa_enabled

feat(m365): add entra_app_enforced_restrictions security check (#10058 )

2026-02-25 11:53:35 +01:00

entra_admin_users_sign_in_frequency_enabled

feat(m365): add entra_app_enforced_restrictions security check (#10058 )

2026-02-25 11:53:35 +01:00

entra_all_apps_conditional_access_coverage

feat(m365): add entra_all_apps_conditional_access_coverage security check (#9902 )

2026-02-26 11:37:09 +01:00

entra_app_registration_client_secret_unused

feat(m365/entra): add entra_app_registration_client_secret_unused check (consolidates #11097 and #11212 ) (#11232 )

2026-05-19 15:14:32 +01:00

entra_app_registration_no_unused_privileged_permissions

feat(m365): add entra_app_registration_no_unused_privileged_permissions security check (#10080 )

2026-02-19 17:12:50 +01:00

entra_authentication_method_sms_voice_disabled

feat(m365): add entra_authentication_method_sms_voice_disabled security check (#10212 )

2026-03-03 13:08:02 +01:00

entra_break_glass_account_fido2_security_key_registered

fix(m365): surface AuditLog.Read.All permission errors instead of false positives (#10907 )

2026-05-12 18:22:19 +01:00

entra_conditional_access_policy_all_apps_all_users

feat(entra): add new check entra_conditional_access_policy_all_apps_all_users (#10619 )

2026-04-14 12:47:57 +02:00

entra_conditional_access_policy_app_enforced_restrictions

refactor(m365): rename conditional access policy checks to include policy prefix (#10217 )

2026-03-02 13:41:24 +01:00

entra_conditional_access_policy_approved_client_app_required_for_mobile

refactor(m365): normalize CA platforms at model level (#10635 )

2026-04-14 15:00:23 +02:00

entra_conditional_access_policy_block_elevated_insider_risk

feat(m365): add entra_conditional_access_policy_block_elevated_insider_risk security check (#10234 )

2026-03-30 17:27:00 +02:00

entra_conditional_access_policy_block_o365_elevated_insider_risk

feat(m365): add entra_conditional_access_policy_block_o365_elevated_insider_risk security check (#10232 )

2026-03-30 11:49:29 +02:00

entra_conditional_access_policy_block_unknown_device_platforms

feat(m365): add entra_conditional_access_policy_block_unknown_device_platforms security check (#10615 )

2026-04-14 14:32:37 +02:00

entra_conditional_access_policy_compliant_device_hybrid_joined_device_mfa_required

feat(m365): add custom entra_conditional_access_policy_compliant_device_hybrid_joined_device_mfa_required check (#10197 )

2026-03-05 18:11:20 +01:00

entra_conditional_access_policy_corporate_device_sign_in_frequency_enforced

feat(m365): add entra_conditional_access_policy_corporate_device_sign_in_frequency_enforced security check (#10618 )

2026-04-14 14:10:00 +02:00

entra_conditional_access_policy_device_code_flow_blocked

feat(m365): add entra_device_code_flow_blocked security check (#10218 )

2026-03-13 11:31:47 +01:00

entra_conditional_access_policy_device_registration_mfa_required

feat(m365): add device registration MFA and harden Intune enrollment CA check (#10222 )

2026-03-30 13:36:05 +02:00

entra_conditional_access_policy_directory_sync_account_excluded

feat(entra): directory sync account exclusion (#10620 )

2026-04-14 14:16:32 +02:00

entra_conditional_access_policy_explicitly_targets_azure_devops

feat(m365): add Azure DevOps Conditional Access check (#11182 )

2026-06-24 13:33:51 +02:00

entra_conditional_access_policy_groups_management_restricted

feat(m365): add Entra Conditional Access group management restriction (#11342 )

2026-07-01 11:38:54 +02:00

entra_conditional_access_policy_mdm_compliant_device_required

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

entra_conditional_access_policy_mfa_enforced_for_guest_users

feat(m365): add entra_conditional_access_policy_mfa_enforced_for_guest_users security check (#10616 )

2026-04-14 13:45:12 +02:00

entra_conditional_access_policy_no_deleted_object_references

feat(m365/entra): add entra_conditional_access_policy_no_deleted_object_references check (#11236 )

2026-06-17 16:16:49 +02:00

entra_conditional_access_policy_no_exclusion_gaps

feat(m365): add entra_conditional_access_policy_no_exclusion_gaps check (#11577 )

2026-06-24 17:03:15 +02:00

entra_conditional_access_policy_require_mfa_for_management_api

refactor(m365): rename conditional access policy checks to include policy prefix (#10217 )

2026-03-02 13:41:24 +01:00

entra_default_app_management_policy_enabled

feat(m365): add entra_default_app_management_policy_enabled security check (#9898 )

2026-02-26 16:14:29 +01:00

entra_directory_sync_object_takeover_blocked

feat(m365): add check for directory sync object takeover protection (#11098 )

2026-06-17 12:15:14 +02:00

entra_dynamic_group_for_guests_created

feat: adapt Microsoft365 provider to use PowerShell (#7331 )

2025-04-15 13:24:09 -04:00

entra_emergency_access_exclusion

refactor(m365): scope entra_emergency_access_exclusion to Block-grant policies (#10849 )

2026-05-12 10:40:46 +01:00

entra_identity_protection_sign_in_risk_enabled

feat(m365): add entra_app_enforced_restrictions security check (#10058 )

2026-02-25 11:53:35 +01:00

entra_identity_protection_user_risk_enabled

feat(m365): add entra_app_enforced_restrictions security check (#10058 )

2026-02-25 11:53:35 +01:00

entra_intune_enrollment_sign_in_frequency_every_time

feat(m365): add device registration MFA and harden Intune enrollment CA check (#10222 )

2026-03-30 13:36:05 +02:00

entra_legacy_authentication_blocked

feat(m365): add entra_app_enforced_restrictions security check (#10058 )

2026-02-25 11:53:35 +01:00

entra_managed_device_required_for_authentication

feat(stackit): add new provider with 4 checks (#9237 )

2026-05-28 13:16:38 +02:00

entra_managed_device_required_for_mfa_registration

feat(m365): add entra_app_enforced_restrictions security check (#10058 )

2026-02-25 11:53:35 +01:00

entra_password_hash_sync_enabled

feat: adapt Microsoft365 provider to use PowerShell (#7331 )

2025-04-15 13:24:09 -04:00

entra_policy_ensure_default_user_cannot_create_tenants

feat: adapt Microsoft365 provider to use PowerShell (#7331 )

2025-04-15 13:24:09 -04:00

entra_policy_guest_invite_only_for_admin_roles

feat: adapt Microsoft365 provider to use PowerShell (#7331 )

2025-04-15 13:24:09 -04:00

entra_policy_guest_users_access_restrictions

feat: adapt Microsoft365 provider to use PowerShell (#7331 )

2025-04-15 13:24:09 -04:00

entra_policy_restricts_user_consent_for_apps

feat: adapt Microsoft365 provider to use PowerShell (#7331 )

2025-04-15 13:24:09 -04:00

entra_seamless_sso_disabled

feat(m365): add entra_seamless_sso_disabled security check (#10086 )

2026-02-19 18:19:07 +01:00

entra_service_principal_no_secrets_for_permanent_tier0_roles

feat(m365): add entra_service_principal_no_secrets_for_permanent_tier0_roles security check (#10788 )

2026-05-12 10:45:32 +01:00

entra_service_principal_privileged_role_no_owners

feat(m365): add entra_service_prinicipal_privileged_role_no_owners_check (#11189 )

2026-06-09 11:29:03 +02:00

entra_thirdparty_integrated_apps_not_allowed

feat: adapt Microsoft365 provider to use PowerShell (#7331 )

2025-04-15 13:24:09 -04:00

entra_users_mfa_capable

fix(m365): skip future hires in MFA capable check (#11511 )

2026-06-09 15:42:06 +02:00

entra_users_mfa_enabled

feat(m365): add entra_app_enforced_restrictions security check (#10058 )

2026-02-25 11:53:35 +01:00

microsoft365_entra_service_test.py

feat(m365): add exchange application access policy check (#11247 )

2026-07-02 10:16:07 +01:00