Robuta

https://maester.dev/docs/tests/CISA.MS.AAD.3.8/ CISA.MS.AAD.3.8 - Managed Devices SHOULD be required to register MFA. | Maester Managed Devices SHOULD be required to register MFA. Rationale: Reduce risk of an adversary using stolen user credentials and then registering their own MFA... https://maester.dev/docs/tests/MT.1158/ MT.1158 - Scan should be scheduled | Maester Checks that a scheduled scan day is configured in all assigned Microsoft Defender Antivirus policies. An irregular scan schedule may miss persistent threats on... mtscanscheduledmaester https://maester.dev/docs/alerts/email/ Set up Maester email alerts | Maester Your Maester monitoring workflow can be configured to send an email summary at the end of each monitoring cycle. This guide will walk you through the steps to... set upmaesteremailalerts https://duo-infernale.ch/what-is-maester What is Maester? - Duo Infernale the Blog Jul 19, 2024 - Discover Maester, a PowerShell-based test automation framework designed to maintain control over your Microsoft security configurations. Learn about its... what ismaesterduoblog https://maester.dev/docs/tests/MT.1111/ MT.1111 - High privileged user should be linked to an identity | Maester Linking a privileged user account to the primary work account in Microsoft Defender XDR makes it easier to detect, prioritize, and contain attacks that target... https://maester.dev/docs/tests/ORCA.108.1/ ORCA.108.1 - DNS Records have been set up to support DKIM. | Maester DKIM signing can help protect the authenticity of your messages in transit and can assist with deliverability of your email messages. Remediation action Set up... https://maester.dev/docs/tests/MT.1099/ MT.1099 - Windows Diagnostic Data Processing should be enabled | Maester Test whether Windows diagnostic data processor configuration is enabled. Before you can use some Intune features, you must enable Windows diagnostic data in... diagnostic datamtwindowsprocessingenabled https://maester.dev/docs/tests/MT.1085/ MT.1085 - Pending approvals for Critical Asset Management should not be present | Maester Microsoft provides an approval step for assets that do not meet the automatic classification threshold. Assets with a lower classification confidence score... https://maester.dev/docs/tests/MT.1028/ MT.1028 - No user with mailbox and permanent role assignment on Control Plane. | Maester GET /beta/roleManagement/directory/roleAssignments?$expand=principal https://maester.dev/docs/tests/MT.1150/ MT.1150 - Cloud Protection should be enabled | Maester Verify that cloud protection is enabled for real-time threat intelligence. Disabled cloud protection reduces real-time threat detection and response... cloud protectionmtenabledmaester https://clatent.com/2025/02/now-you-can-use-your-own-company-standards-with-maester-custom-tests/ Now you can use your own company standards with Maester custom tests Feb 3, 2025 - I thought checking to see if they were filled in or even formatted correctly wasn't enough.. now you can config the validation.json file in the Validating... use your own https://maester.dev/docs/commands/Test-MtMdeCloudExtendedTimeout/ Test-MtMdeCloudExtendedTimeout | Maester Checks if cloud extended timeout is configured between 30-50 seconds testmaester https://maester.dev/docs/commands/Test-MtCisFormsPhishingProtectionEnabled/ Test-MtCisFormsPhishingProtectionEnabled | Maester Checks if the internal phishing protection for Microsoft Forms is enabled. testmaester