Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Structural baseline updates (cleaned up) #334

Merged
merged 15 commits into from
May 15, 2023

Conversation

ahuynhMITRE
Copy link
Collaborator

@ahuynhMITRE ahuynhMITRE commented May 12, 2023

🗣 Description

Cleaned up Pull request for updating the baseline markdown files with some of the identified "structural" changes to serve as a starting point for the team to start on "substantive" changes and in support of the automation of the markdown files to json (issue #209). Following changes include:

  • REMOVE All Numbering from “Introductions”, “Assumptions”, and “Baseline” sections of the markdown.
  • ADD New baseline versioning schema to each policy.
  • ADD “Last Modified” section below “Rationale” Section.
  • UPDATE Group Name to remove "SHALL" and "SHOULD" language.
  • UPDATE all relative references (e.g., "see above policies”) with new policy IDs.
  • updated all policy IDs for exchange from MS.EXCHANGE to MS.EXO
  • Updated the markdown file name exchange.md to exo.md

💭 Motivation and context

This change is required to support testing of Issue #209 and is in support of creating a "starting point" for the issues associated with the "substantive" changes for each M365 product. Many of the updates also support partially resolving the "Markdown document alignment issues" opened for each product.

🧪 Testing

Changes can be tested by confirming script used in Issue #209 is supported. Markdown files are not corrupt and open as expected.

✅ Pre-approval checklist

  • This PR has an informative and human-readable title.
  • Changes are limited to a single goal - eschew scope creep!
  • All relevant repo and/or project documentation has been updated to reflect the changes in this PR.

✅ Pre-merge checklist

  • Revert dependencies to default branches.
  • Finalize version.

✅ Post-merge checklist

  • Validate post-merge checks passed on merged branch

@ahuynhMITRE ahuynhMITRE added the baseline-document Issues relating to the text in the baseline documents themselves label May 12, 2023
@ahuynhMITRE ahuynhMITRE added this to the Emerald milestone May 12, 2023
@ahuynhMITRE ahuynhMITRE requested review from tkol2022 and schrolla May 12, 2023 18:57
@ahuynhMITRE ahuynhMITRE self-assigned this May 12, 2023
@ahuynhMITRE ahuynhMITRE changed the base branch from main to emerald May 12, 2023 19:06
Copy link
Collaborator

@schrolla schrolla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overall looks good, but a few minor formatting items to address in comments below.

baselines/defender.md Outdated Show resolved Hide resolved
baselines/powerbi.md Outdated Show resolved Hide resolved
baselines/aad.md Show resolved Hide resolved
baselines/aad.md Outdated Show resolved Hide resolved
baselines/powerbi.md Outdated Show resolved Hide resolved
baselines/powerbi.md Show resolved Hide resolved
ahuynhMITRE and others added 6 commits May 12, 2023 15:52
good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
referenced old policy number
Copy link
Collaborator Author

@ahuynhMITRE ahuynhMITRE left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

great finds Addam, have made the appropriate updates!

Copy link
Collaborator

@tkol2022 tkol2022 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was a lot of work. Nice job!

@ahuynhMITRE ahuynhMITRE requested a review from schrolla May 13, 2023 19:11
@nanda-katikaneni nanda-katikaneni merged commit 97b62d4 into emerald May 15, 2023
crutchfield pushed a commit that referenced this pull request May 16, 2023
* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
crutchfield pushed a commit that referenced this pull request May 16, 2023
* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
crutchfield pushed a commit that referenced this pull request May 16, 2023
* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
crutchfield added a commit that referenced this pull request Aug 23, 2023
* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Updates to ExportAADProvider

* Updates to ExportAADProvider

* Revert changes to AADConfig.reg

* Updates to aad 7.2v1

* Updates to ExportAADProvider

* Updates to ExportAADProvider

* Update to AAD 7.2 Rego Unit Test

* Fixes to aad 7.2 rego unit tests

* Updates to AADConfig_07_test.rego

* Removed TODO comment in RequredVersions.ps1

* Minor updates to AAD Rego

---------

Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>
Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
nanda-katikaneni added a commit that referenced this pull request Aug 24, 2023
* Remove MS Graph 2.0 from GitHub Action, Run PowerShell Tests (#446)

* Remove MS Graph 2.0

* Add MS Graph 2.0 removal to SmokeTest

* Add path to run smoke test

* Fix YAML error

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Implement MS.AAD.3.1v1 phishing resistant mfa for all users (#433)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>

* Add rego for MS.AAD.3.8v1 - Managed device required for MFA registration (#416)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-author…
schrolla added a commit that referenced this pull request Sep 1, 2023
* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
schrolla added a commit that referenced this pull request Sep 1, 2023
* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
schrolla added a commit that referenced this pull request Sep 1, 2023
* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>
schrolla added a commit that referenced this pull request Sep 1, 2023
* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
schrolla added a commit that referenced this pull request Sep 1, 2023
* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>
schrolla added a commit that referenced this pull request Sep 1, 2023
…ion (#416)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Add rego for MS.AAD.3.8v1

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Add rego for MS.AAD.3.8v1

* Update Testing/Unit/Rego/AAD/AADConfig_03_test.rego

* Update Testing/Unit/Rego/AAD/AADConfig_03_test.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Add exclusion exception checks AAD 3.8

* Update Testing/Unit/Rego/Teams/TeamsConfig_07_test.rego

Merged incorrectly

* Fix merge conflict

* Fix merge issue

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>
schrolla added a commit that referenced this pull request Sep 1, 2023
* Implement AAD 3.4

* Remove MS Graph 2.0 from GitHub Action, Run PowerShell Tests (#446)

* Remove MS Graph 2.0

* Add MS Graph 2.0 removal to SmokeTest

* Add path to run smoke test

* Fix YAML error

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Implement MS.AAD.3.1v1 phishing resistant mfa for all users (#433)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>

* Implement AAD 3.4

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>
schrolla added a commit that referenced this pull request Sep 1, 2023
* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Updates to ExportAADProvider

* Updates to ExportAADProvider

* Revert changes to AADConfig.reg

* Updates to aad 7.2v1

* Updates to ExportAADProvider

* Updates to ExportAADProvider

* Update to AAD 7.2 Rego Unit Test

* Fixes to aad 7.2 rego unit tests

* Updates to AADConfig_07_test.rego

* Removed TODO comment in RequredVersions.ps1

* Minor updates to AAD Rego

---------

Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>
Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
schrolla added a commit that referenced this pull request Sep 1, 2023
* Remove MS Graph 2.0 from GitHub Action, Run PowerShell Tests (#446)

* Remove MS Graph 2.0

* Add MS Graph 2.0 removal to SmokeTest

* Add path to run smoke test

* Fix YAML error

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Implement MS.AAD.3.1v1 phishing resistant mfa for all users (#433)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>

* Add rego for MS.AAD.3.8v1 - Managed device required for MFA registration (#416)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-author…
@schrolla schrolla deleted the Structural-Baseline-Updates branch October 3, 2023 19:28
schrolla added a commit that referenced this pull request Nov 2, 2023
* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
…ion (#416)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Add rego for MS.AAD.3.8v1

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Add rego for MS.AAD.3.8v1

* Update Testing/Unit/Rego/AAD/AADConfig_03_test.rego

* Update Testing/Unit/Rego/AAD/AADConfig_03_test.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Add exclusion exception checks AAD 3.8

* Update Testing/Unit/Rego/Teams/TeamsConfig_07_test.rego

Merged incorrectly

* Fix merge conflict

* Fix merge issue

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Implement AAD 3.4

* Remove MS Graph 2.0 from GitHub Action, Run PowerShell Tests (#446)

* Remove MS Graph 2.0

* Add MS Graph 2.0 removal to SmokeTest

* Add path to run smoke test

* Fix YAML error

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Implement MS.AAD.3.1v1 phishing resistant mfa for all users (#433)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>

* Implement AAD 3.4

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Updates to ExportAADProvider

* Updates to ExportAADProvider

* Revert changes to AADConfig.reg

* Updates to aad 7.2v1

* Updates to ExportAADProvider

* Updates to ExportAADProvider

* Update to AAD 7.2 Rego Unit Test

* Fixes to aad 7.2 rego unit tests

* Updates to AADConfig_07_test.rego

* Removed TODO comment in RequredVersions.ps1

* Minor updates to AAD Rego

---------

Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>
Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Remove MS Graph 2.0 from GitHub Action, Run PowerShell Tests (#446)

* Remove MS Graph 2.0

* Add MS Graph 2.0 removal to SmokeTest

* Add path to run smoke test

* Fix YAML error

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Implement MS.AAD.3.1v1 phishing resistant mfa for all users (#433)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>

* Add rego for MS.AAD.3.8v1 - Managed device required for MFA registration (#416)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-author…
schrolla added a commit that referenced this pull request Nov 2, 2023
* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
…ion (#416)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Add rego for MS.AAD.3.8v1

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Add rego for MS.AAD.3.8v1

* Update Testing/Unit/Rego/AAD/AADConfig_03_test.rego

* Update Testing/Unit/Rego/AAD/AADConfig_03_test.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Add exclusion exception checks AAD 3.8

* Update Testing/Unit/Rego/Teams/TeamsConfig_07_test.rego

Merged incorrectly

* Fix merge conflict

* Fix merge issue

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Implement AAD 3.4

* Remove MS Graph 2.0 from GitHub Action, Run PowerShell Tests (#446)

* Remove MS Graph 2.0

* Add MS Graph 2.0 removal to SmokeTest

* Add path to run smoke test

* Fix YAML error

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Implement MS.AAD.3.1v1 phishing resistant mfa for all users (#433)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>

* Implement AAD 3.4

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Updates to ExportAADProvider

* Updates to ExportAADProvider

* Revert changes to AADConfig.reg

* Updates to aad 7.2v1

* Updates to ExportAADProvider

* Updates to ExportAADProvider

* Update to AAD 7.2 Rego Unit Test

* Fixes to aad 7.2 rego unit tests

* Updates to AADConfig_07_test.rego

* Removed TODO comment in RequredVersions.ps1

* Minor updates to AAD Rego

---------

Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>
Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
schrolla added a commit that referenced this pull request Nov 2, 2023
* Remove MS Graph 2.0 from GitHub Action, Run PowerShell Tests (#446)

* Remove MS Graph 2.0

* Add MS Graph 2.0 removal to SmokeTest

* Add path to run smoke test

* Fix YAML error

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Implement MS.AAD.3.1v1 phishing resistant mfa for all users (#433)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Check if missing reported

* Change missing to warning

* Fix UT for warning

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Update Testing/Unit/PowerShell/CreateReport/New-Report.Tests.ps1

* Align with updated defender.md

* Update to match defender

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* One drive baseline (#370)

* update onedrive baseline

* remove should shall language

* remove Configuring On-Premises Devices session at the end of the doc

* Update wording for policy1

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update policy 2 to keep consistency

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update wording for note

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Spelling error fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* spelling fix

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* change name to match with sharepoint

* Update onedrive.md

remove MS.ONEDRIVE.3.1v1 because it is actually duplicate of policy MS.ONEDRIVE.1.1v1 @Sloane4 Might want to remove the reference in MS.SHAREPOINT.2.1v1

* Update onedrive.md

revert changes

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* DLP policy group additions and updates (#381)

* Adjudicate Substantive AAD Baseline Comments (#379)

* Updated to reflect phishing-resistant preferences

* Updated to reflect phishing resistant pref'starting

* Updates to AAD Policy 2.4

* Updates to aad policies

* Updates to aad markdown

* aad updates

* aad baseline updates

* aad baseline update (2.10)

* aad baseline updates (removed 2.9)

* updates to aad baseline (16.2)

* aad 4.1 implementation updates

* updates to aad 4 baseline policy implementations

* Updates to aad policy 14

* updates to aad baseline

* updates to aad.4.7v1 implementation

* updates to aad.4.7v1

* Consolidated highly privileged user policies

* fixes to aad.11.x

* updates to policy 7

* Update to AAD 11 policy front matter (intro text)

* updates to aad baseline

* testing write to GitHub

* backup of revisions 062223

* backup 062323 6:47

* backup 062623

---------

Co-authored-by: Ted Kolovos <tkolovos@mitre.org>

* Added SharePoint to MS.DEFENDER.4.2v1 locations (#402)

* Update aad scubagear code to align to revised baseline (#408)

* Rearranged policies to match baseline updates

* Added versioning for duplicate unit test title

* Removed unused import

* Updated MS.AAD.7.1v1 from less than 5 to less than 9

* Updated comment?

* Updated yaml file

* Comment update

* Differentiate policy id vs implementation (#414)

* WIP

* Updated ReportDetails on tests to match patch results (#426)

* Address Power Platform pilot comments and substantive changes in the baseline document Part 2 (#424)

* power platform baseline doc refactor

* address Grant's comments

* forgot to update this header

* consistent Policies header

* wip

* Implemented AAD 3.1

* WIP

* wip

* Implemented AAD 3.1

* Update Rego/AADConfig.rego

* Update Smoke Test to handle CAP  (#418)

* Fix CAP table check

* Fix lint issue

* update MS.AAD.7.6v1 to only check for global admin (#428)

* Combine Sharepoint with OneDrive and address feedback from review period (#393)

* draft update & merge of Sharepoint OneDrive

* fixed policies wrong spelling

* fixed note indent formatting

* delete onedrive md file - have a combined file now

* missing heading for some implementations

* Added rationales for all policy items.

* spelling errors and removed instructions comma

* changed IDs to SHAREPOINT based on team vote

* fixed duplicate ID in instructions

---------

Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Adjudicate review comments

* WIP

* wip

* Implemented AAD 3.1

* WIP

* wip

* Update Rego/AADConfig.rego

* Adjudicate review comments

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>
Co-authored-by: Alden Hilton <106177711+adhilto@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>
Co-authored-by: Cassandra Diaz <47129205+Sloane4@users.noreply.github.com>
Co-authored-by: Dylan Gao <107067015+Dylan-MITRE@users.noreply.github.com>
Co-authored-by: Shanti Satyapal <78565245+ssatyapal123@users.noreply.github.com>
Co-authored-by: Ted Kolovos <tkolovos@mitre.org>
Co-authored-by: David Bui <105074908+buidav@users.noreply.github.com>
Co-authored-by: Ted Kolovos <107076927+tkol2022@users.noreply.github.com>

* Add rego for MS.AAD.3.8v1 - Managed device required for MFA registration (#416)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Add quiet mode for invoke-scuba (#357)

* Add quiet option

* Invert Stance on Defender Preset Policies in Markdown (#355)

* Inverted 2.1, removed applicable controls

* Ironed out baselines for the using the preset policies

* Minor wording updates to MS.DEFENDER.1.1v1 rationale

* Minor wording updates to MS.DEFENDER.2.3v1 policy statement

* Minor wording updates to MS.DEFENDER.2.3v1 rationale

* Update to MS.DEFENDER.2.4v1 license restrictions in GCC high and DoD regions

* Minor wording updates to MS.DEFENDER.3.1v1 rationale

* Minor wording update to MS.DEFENDER.2.3v1 rationale

* Minor wording change to Safe Attachments group text

* Remove hyphen from Safe Attachments policy group title.

* Added new policy item 1.1v1 and renumered others; added sensitive accounts language

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Addam Schroll <aschroll@mitre.org>

* Substantiative changes to Sharepoint Baseline minus Rationale (#360)

* Structural baseline updates (cleaned up) (#334)

---------

* Split policies for testing purposes

* Addition for github issue: Add a new SharePoint Guest sign in Policy #307

* Updated for github issue: Direct the user to save in policy implementation SharePoint #301

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Fix UT errors

* Default baseline for testing

* Updates based on review comments

* Call Import-SecureBaseline once

* Update for review comments

* Review updates

* Add help comment

* remove unused import

* Fix OPA  check issues

* fix opa tests action

* Update action to test

* Action update

* Sum PS/Bug as Errors

* Update darkmode colors

* Fix UT after Rebase

* Fix UT

* Fix error log

* Update UT for NewReport

* Update link color

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Sloane4 <cdiaz@mitre.org>

* Update for github issue Sharepoint 2.3 Sharing settings cannot be more restrictive than the tenant level #288

* Updat for github issue Update SharePoint Policy 2.4 Code #300

* Additional changes for #288

* Update with correct implementations

* Update for github issue #303

* Added some rational & fixed policy numbers

* Split policy 5 to improve setting check & report.

* Updated for duplicates with onedrive

* Add resource for details about reauthentication github issue #299

* Removed Should & Shall from intro paragraphs.

* Split implementation for each policy item

* Updated code to match baseline TODO Unit tests

* Updated unit tests

* Fixed policy 4

* Update commandlet for MS.SHAREPOINT.5.2v1

* Updated content style guide for new rego structure

* Readded comments to MS.SHAREPOINT.5.2v1

* Baseline updated with requested fixes (addam)

* Move updates to content style guide to new branch (not part of current scope)

* Update ErrMsg for MS.SHAREPOINT.4 to be more readable

---------

Co-authored-by: Andrew Huynh <113476170+ahuynhMITRE@users.noreply.github.com>
Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>
Co-authored-by: Richard Crutchfield <crutchfield@users.noreply.github.com>

* Fix test location file path (#367)

* Enhanced smoke test - check for missing results (#356)

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Initial drop of secure baseline automation  (#336)

* initial teams drop

* Add markdown check

* Fix spelling

* Check action

* Test Action

* Check version

* Fix Markdown test

* Add path *.md

* Update anchor func

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/powerbi.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update baselines/aad.md

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* Update aad.md

referenced old policy number

* Update powerbi.md

---------

Co-authored-by: Addam Schroll <108814318+schrolla@users.noreply.github.com>

* initial teams drop

* Update AAD

* WIP

* WIP

* WIP

* WIP

* WIP

* Structural baseline updates (cleaned up) (#334)

* Update aad.md

all updates

* Update defender.md

all updates

* Update exchange.md

all updates

* Rename exchange.md to exo.md

* Update onedrive.md

* Update powerbi.md

all updates

* Update powerplatform.md

all updates

* Update sharepoint.md

all updates

* Update teams.md

all updates

* Update baselines/defender.md

good catch!

Co-author…
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
baseline-document Issues relating to the text in the baseline documents themselves
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants