remove incorrect Commandlet names from Rego AAD 3.6

cisagov · Mar 16, 2024 · eed0677 · eed0677
1 parent c7263d3
commit eed0677
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/PowerShell/ScubaGear/Rego/AADConfig.rego b/PowerShell/ScubaGear/Rego/AADConfig.rego
@@ -378,7 +378,7 @@ PhishingResistantMFA contains CAPolicy.DisplayName if {
 tests contains {
     "PolicyId": "MS.AAD.3.6v1",
     "Criticality": "Shall",
-    "Commandlet": ["Get-MgBetaSubscribedSku", "Get-PrivilegedRole", "Get-MgBetaIdentityConditionalAccessPolicy"],
+    "Commandlet": ["Get-MgBetaIdentityConditionalAccessPolicy"],
     "ActualValue": PhishingResistantMFA,
     "ReportDetails": concat(". ", [ReportFullDetailsArray(PhishingResistantMFA, DescriptionString), CAPLINK]),
     "RequirementMet": Status