Hugo P.Brito 6cd2ffbca2 feat(m365): add entra_pim_only_management check sharing PIM alert fetch ...

Add the PIM-only management security check on top of the shared
_get_pim_alerts implementation already introduced for the PIM stale
sign-in alert check (#10798). Avoid duplicating the service-layer fetch
that the original branch carried with its own beta endpoint + httpx
client; instead, consume the v1.0 unified roleManagement alerts feed via
the dict already populated on entra_client.

Detection logic: look up an active PIM alert whose definition id contains
'RolesAssignedOutsidePim'. FAIL when the alert is active with affected
items, PASS when it exists with no items (or is inactive), and MANUAL
when the alert is unavailable (no Microsoft Entra ID P2, alert disabled,
or insufficient permissions).

Compliance: extend CIS 4.0/6.0 control 5.3.1 and ISO 27001:2022 A.5.16 /
A.5.18 mappings to include this check alongside the stale sign-in alert
counterpart.

2026-05-11 12:55:32 +01:00

..

config

feat(sdk): integrate universal compliance into CLI pipeline (#10301)

2026-04-30 13:49:00 +02:00

contrib/wazuh

fix(wazuh): patch command injection vulnerability in prowler-wrapper.py (#8331)

2025-07-23 16:06:55 +02:00

lib

chore: route vulnerability references to canonical URLs (#10853)

2026-05-07 15:28:50 +01:00

providers

feat(m365): add entra_pim_only_management check sharing PIM alert fetch

2026-05-11 12:55:32 +01:00

__init__.py

feat(pip): Prepare for PyPI (#1531)

2022-12-13 09:07:55 +01:00