https://maester.dev/docs/tests/CISA.MS.AAD.3.8/
CISA.MS.AAD.3.8 - Managed Devices SHOULD be required to register MFA. | Maester
Managed Devices SHOULD be required to register MFA. Rationale: Reduce risk of an adversary using stolen user credentials and then registering their own MFA...
https://maester.dev/docs/tests/MT.1158/
MT.1158 - Scan should be scheduled | Maester
Checks that a scheduled scan day is configured in all assigned Microsoft Defender Antivirus policies. An irregular scan schedule may miss persistent threats on...
mtscanscheduledmaester
https://maester.dev/docs/alerts/email/
Set up Maester email alerts | Maester
Your Maester monitoring workflow can be configured to send an email summary at the end of each monitoring cycle. This guide will walk you through the steps to...
set upmaesteremailalerts
https://duo-infernale.ch/what-is-maester
What is Maester? - Duo Infernale the Blog
Jul 19, 2024 - Discover Maester, a PowerShell-based test automation framework designed to maintain control over your Microsoft security configurations. Learn about its...
what ismaesterduoblog
https://maester.dev/docs/tests/MT.1111/
MT.1111 - High privileged user should be linked to an identity | Maester
Linking a privileged user account to the primary work account in Microsoft Defender XDR makes it easier to detect, prioritize, and contain attacks that target...
https://maester.dev/docs/tests/ORCA.108.1/
ORCA.108.1 - DNS Records have been set up to support DKIM. | Maester
DKIM signing can help protect the authenticity of your messages in transit and can assist with deliverability of your email messages. Remediation action Set up...
https://maester.dev/docs/tests/MT.1099/
MT.1099 - Windows Diagnostic Data Processing should be enabled | Maester
Test whether Windows diagnostic data processor configuration is enabled. Before you can use some Intune features, you must enable Windows diagnostic data in...
diagnostic datamtwindowsprocessingenabled
https://maester.dev/docs/tests/MT.1085/
MT.1085 - Pending approvals for Critical Asset Management should not be present | Maester
Microsoft provides an approval step for assets that do not meet the automatic classification threshold. Assets with a lower classification confidence score...
https://maester.dev/docs/tests/MT.1028/
MT.1028 - No user with mailbox and permanent role assignment on Control Plane. | Maester
GET /beta/roleManagement/directory/roleAssignments?$expand=principal
https://maester.dev/docs/tests/MT.1150/
MT.1150 - Cloud Protection should be enabled | Maester
Verify that cloud protection is enabled for real-time threat intelligence. Disabled cloud protection reduces real-time threat detection and response...
cloud protectionmtenabledmaester
https://clatent.com/2025/02/now-you-can-use-your-own-company-standards-with-maester-custom-tests/
Now you can use your own company standards with Maester custom tests
Feb 3, 2025 - I thought checking to see if they were filled in or even formatted correctly wasn't enough.. now you can config the validation.json file in the Validating...
use your own
https://maester.dev/docs/commands/Test-MtMdeCloudExtendedTimeout/
Test-MtMdeCloudExtendedTimeout | Maester
Checks if cloud extended timeout is configured between 30-50 seconds
testmaester
https://maester.dev/docs/commands/Test-MtCisFormsPhishingProtectionEnabled/
Test-MtCisFormsPhishingProtectionEnabled | Maester
Checks if the internal phishing protection for Microsoft Forms is enabled.
testmaester