Tests authored
- CIS.M365.8.1.1(L2) Ensure external file sharing in Teams is enabled for only approved cloud storage services
- CIS.M365.8.2.2(L1) Ensure communication with unmanaged Teams users is disabled
- CIS.M365.8.4.1(L1) Ensure app permission policies are configured
- CIS.M365.8.5.3(L1) Ensure only people in my org can bypass the lobby
- CIS.M365.8.6.1(L1) Ensure users can report security concerns in Teams
- MT.1050Apps with high-risk permissions having a direct path to Global Administrator
- MT.1051Apps with high-risk permissions having an indirect path to Global Administrator
- MT.1053Ensure intune device clean-up rule is configured
- MT.1054Ensure built-in Device Compliance Policy marks devices with no compliance policy assigned as 'Not compliant'
- MT.1071At least one Conditional Access policy explicitly includes Azure DevOps.
- MT.1072Conditional Access policies should not use the deprecated Approved Client App grant.
- MT.1073Soft- and hard-matching of synchronized objects should be blocked.
- MT.1074Ensure no more than 100 outbound mails per day are sent using the .onmicrosoft.com domain