|
217 | 217 | "name": "standards.DisableBasicAuthSMTP", |
218 | 218 | "cat": "Global Standards", |
219 | 219 | "tag": [], |
220 | | - "helpText": "Disables SMTP AUTH for the organization and all users. This is the default for new tenants. ", |
| 220 | + "helpText": "Disables SMTP AUTH for the organization and all users. This is the default for new tenants.", |
221 | 221 | "docsDescription": "Disables SMTP basic authentication for the tenant and all users with it explicitly enabled.", |
222 | 222 | "addedComponent": [], |
223 | 223 | "label": "Disable SMTP Basic Authentication", |
|
546 | 546 | "name": "standards.DisableTenantCreation", |
547 | 547 | "cat": "Entra (AAD) Standards", |
548 | 548 | "tag": ["CIS"], |
549 | | - "helpText": "Restricts creation of M365 tenants to the Global Administrator or Tenant Creator roles. ", |
| 549 | + "helpText": "Restricts creation of M365 tenants to the Global Administrator or Tenant Creator roles.", |
550 | 550 | "docsDescription": "Users by default are allowed to create M365 tenants. This disables that so only admins can create new M365 tenants.", |
551 | 551 | "addedComponent": [], |
552 | 552 | "label": "Disable M365 Tenant creation by users", |
|
772 | 772 | "impact": "Medium Impact", |
773 | 773 | "impactColour": "warning", |
774 | 774 | "addedDate": "2024-11-12", |
775 | | - "powershellEquivalent": "", |
| 775 | + "powershellEquivalent": "Graph API", |
776 | 776 | "recommendedBy": [] |
777 | 777 | }, |
778 | 778 | { |
|
785 | 785 | { |
786 | 786 | "type": "number", |
787 | 787 | "name": "standards.StaleEntraDevices.deviceAgeThreshold", |
788 | | - "label": "Days before stale(Dont set below 30)" |
| 788 | + "label": "Days before stale(Do not set below 30)" |
789 | 789 | } |
790 | 790 | ], |
791 | 791 | "disabledFeatures": { |
|
1687 | 1687 | "powershellEquivalent": "New-ProtectionAlert and Set-ProtectionAlert", |
1688 | 1688 | "recommendedBy": [] |
1689 | 1689 | }, |
| 1690 | + { |
| 1691 | + "name": "standards.SharePointMassDeletionAlert", |
| 1692 | + "cat": "Defender Standards", |
| 1693 | + "tag": [], |
| 1694 | + "helpText": "Sets a e-mail address to alert when a User deletes more than 20 SharePoint files within 60 minutes. NB: Requires a Office 365 E5 subscription, Office 365 E3 with Threat Intelligence or Office 365 EquivioAnalytics add-on.", |
| 1695 | + "docsDescription": "Sets a e-mail address to alert when a User deletes more than 20 SharePoint files within 60 minutes. This is useful for monitoring and ensuring that the correct SharePoint files are deleted. NB: Requires a Office 365 E5 subscription, Office 365 E3 with Threat Intelligence or Office 365 EquivioAnalytics add-on.", |
| 1696 | + "addedComponent": [ |
| 1697 | + { |
| 1698 | + "type": "number", |
| 1699 | + "name": "standards.SharePointMassDeletionAlert.Threshold", |
| 1700 | + "label": "Max files to delete within the time frame", |
| 1701 | + "defaultValue": 20 |
| 1702 | + }, |
| 1703 | + { |
| 1704 | + "type": "number", |
| 1705 | + "name": "standards.SharePointMassDeletionAlert.TimeWindow", |
| 1706 | + "label": "Time frame in minutes", |
| 1707 | + "defaultValue": 60 |
| 1708 | + }, |
| 1709 | + { |
| 1710 | + "type": "autoComplete", |
| 1711 | + "multiple": true, |
| 1712 | + "creatable": true, |
| 1713 | + "required": true, |
| 1714 | + "name": "standards.SharePointMassDeletionAlert.NotifyUser", |
| 1715 | + "label": "E-mail to receive the alert" |
| 1716 | + } |
| 1717 | + ], |
| 1718 | + "label": "SharePoint Mass Deletion Alert", |
| 1719 | + "impact": "Low Impact", |
| 1720 | + "impactColour": "info", |
| 1721 | + "addedDate": "2025-04-07", |
| 1722 | + "powershellEquivalent": "New-ProtectionAlert and Set-ProtectionAlert", |
| 1723 | + "recommendedBy": [] |
| 1724 | + }, |
1690 | 1725 | { |
1691 | 1726 | "name": "standards.SafeLinksPolicy", |
1692 | 1727 | "cat": "Defender Standards", |
1693 | 1728 | "tag": ["CIS", "mdo_safelinksforemail", "mdo_safelinksforOfficeApps"], |
1694 | | - "helpText": "This creates a safelink policy that automatically scans, tracks, and and enables safe links for Email, Office, and Teams for both external and internal senders", |
| 1729 | + "helpText": "This creates a Safe Links policy that automatically scans, tracks, and and enables safe links for Email, Office, and Teams for both external and internal senders", |
1695 | 1730 | "addedComponent": [ |
1696 | 1731 | { |
1697 | 1732 | "type": "switch", |
|
1717 | 1752 | "label": "Do not rewrite the following URLs in email" |
1718 | 1753 | } |
1719 | 1754 | ], |
1720 | | - "label": "Default SafeLinks Policy", |
| 1755 | + "label": "Default Safe Links Policy", |
1721 | 1756 | "impact": "Low Impact", |
1722 | 1757 | "impactColour": "info", |
1723 | 1758 | "addedDate": "2024-03-25", |
|
1737 | 1772 | "mdo_antiphishingpolicies", |
1738 | 1773 | "mdo_phishthresholdlevel" |
1739 | 1774 | ], |
1740 | | - "helpText": "This creates a Anti-Phishing policy that automatically enables Mailbox Intelligence and spoofing, optional switches for Mailtips.", |
| 1775 | + "helpText": "This creates a Anti-Phishing policy that automatically enables Mailbox Intelligence and spoofing, optional switches for Mail tips.", |
1741 | 1776 | "addedComponent": [ |
1742 | 1777 | { |
1743 | 1778 | "type": "number", |
|
1930 | 1965 | "impact": "Low Impact", |
1931 | 1966 | "impactColour": "info", |
1932 | 1967 | "addedDate": "2024-03-25", |
1933 | | - "powershellEquivalent": "Set-AntiphishPolicy or New-AntiphishPolicy", |
| 1968 | + "powershellEquivalent": "Set-AntiPhishPolicy or New-AntiPhishPolicy", |
1934 | 1969 | "recommendedBy": ["CIS"] |
1935 | 1970 | }, |
1936 | 1971 | { |
1937 | 1972 | "name": "standards.SafeAttachmentPolicy", |
1938 | 1973 | "cat": "Defender Standards", |
1939 | | - "tag": [ |
1940 | | - "CIS", |
1941 | | - "mdo_safedocuments", |
1942 | | - "mdo_commonattachmentsfilter", |
1943 | | - "mdo_safeattachmentpolicy" |
1944 | | - ], |
| 1974 | + "tag": ["CIS", "mdo_safedocuments", "mdo_commonattachmentsfilter", "mdo_safeattachmentpolicy"], |
1945 | 1975 | "helpText": "This creates a Safe Attachment policy", |
1946 | 1976 | "addedComponent": [ |
1947 | 1977 | { |
|
2576 | 2606 | "impact": "Low Impact", |
2577 | 2607 | "impactColour": "info", |
2578 | 2608 | "addedDate": "2024-11-12", |
2579 | | - "powershellEquivalent": "", |
| 2609 | + "powershellEquivalent": "Graph API", |
2580 | 2610 | "recommendedBy": [] |
2581 | 2611 | }, |
2582 | 2612 | { |
|
2709 | 2739 | "cat": "Intune Standards", |
2710 | 2740 | "tag": [], |
2711 | 2741 | "helpText": "Requires MFA for all users to register devices with Intune. This is useful when not using Conditional Access.", |
2712 | | - "label": "Require Multifactor Authentication to register or join devices with Microsoft Entra", |
| 2742 | + "label": "Require Multi-factor Authentication to register or join devices with Microsoft Entra", |
2713 | 2743 | "impact": "Medium Impact", |
2714 | 2744 | "impactColour": "warning", |
2715 | 2745 | "addedDate": "2023-10-23", |
|
2817 | 2847 | "impactColour": "info", |
2818 | 2848 | "addedDate": "2024-07-09", |
2819 | 2849 | "powershellEquivalent": "Set-SPOTenant -EnableAzureADB2BIntegration $true", |
2820 | | - "recommendedBy": ["CIS 3.0"] |
| 2850 | + "recommendedBy": ["CIS"] |
2821 | 2851 | }, |
2822 | 2852 | { |
2823 | 2853 | "name": "standards.SPDisallowInfectedFiles", |
|
2875 | 2905 | "impactColour": "warning", |
2876 | 2906 | "addedDate": "2024-07-09", |
2877 | 2907 | "powershellEquivalent": "Set-SPOTenant -ExternalUserExpireInDays 30 -ExternalUserExpirationRequired $True", |
2878 | | - "recommendedBy": ["CIS 3.0"] |
| 2908 | + "recommendedBy": ["CIS"] |
2879 | 2909 | }, |
2880 | 2910 | { |
2881 | 2911 | "name": "standards.SPEmailAttestation", |
|
3017 | 3047 | "helpText": "Disables the ability for external users to share files they don't own. Sharing links can only be made for People with existing access", |
3018 | 3048 | "docsDescription": "Disables the ability for external users to share files they don't own. Sharing links can only be made for People with existing access. This is a tenant wide setting and overrules any settings set on the site level", |
3019 | 3049 | "addedComponent": [], |
3020 | | - "label": "Disable Resharing by External Users", |
| 3050 | + "label": "Disable Re-sharing by External Users", |
3021 | 3051 | "impact": "High Impact", |
3022 | 3052 | "impactColour": "danger", |
3023 | 3053 | "addedDate": "2022-06-15", |
|
3193 | 3223 | "impactColour": "info", |
3194 | 3224 | "addedDate": "2024-11-12", |
3195 | 3225 | "powershellEquivalent": "Set-CsTeamsMeetingPolicy -AllowAnonymousUsersToJoinMeeting $false -AllowAnonymousUsersToStartMeeting $false -AutoAdmittedUsers EveryoneInCompanyExcludingGuests -AllowPSTNUsersToBypassLobby $false -MeetingChatEnabledType EnabledExceptAnonymous -DesignatedPresenterRoleMode $DesignatedPresenterRoleMode -AllowExternalParticipantGiveRequestControl $false", |
3196 | | - "recommendedBy": ["CIS 3.0"] |
| 3226 | + "recommendedBy": ["CIS"] |
3197 | 3227 | }, |
3198 | 3228 | { |
3199 | 3229 | "name": "standards.TeamsEmailIntegration", |
|
3213 | 3243 | "impactColour": "info", |
3214 | 3244 | "addedDate": "2024-07-30", |
3215 | 3245 | "powershellEquivalent": "Set-CsTeamsClientConfiguration -AllowEmailIntoChannel $false", |
3216 | | - "recommendedBy": ["CIS 3.0"] |
| 3246 | + "recommendedBy": ["CIS"] |
3217 | 3247 | }, |
3218 | 3248 | { |
3219 | 3249 | "name": "standards.TeamsExternalFileSharing", |
|
3252 | 3282 | "impactColour": "info", |
3253 | 3283 | "addedDate": "2024-07-28", |
3254 | 3284 | "powershellEquivalent": "Set-CsTeamsClientConfiguration -AllowGoogleDrive $false -AllowShareFile $false -AllowBox $false -AllowDropBox $false -AllowEgnyte $false", |
3255 | | - "recommendedBy": ["CIS 3.0"] |
| 3285 | + "recommendedBy": ["CIS"] |
3256 | 3286 | }, |
3257 | 3287 | { |
3258 | 3288 | "name": "standards.TeamsEnrollUser", |
|
3667 | 3697 | { "label": "Do not assign", "value": "On" }, |
3668 | 3698 | { "label": "Assign to all users", "value": "allLicensedUsers" }, |
3669 | 3699 | { "label": "Assign to all devices", "value": "AllDevices" }, |
3670 | | - { |
3671 | | - "label": "Assign to all users and devices", |
3672 | | - "value": "AllDevicesAndUsers" |
3673 | | - }, |
| 3700 | + { "label": "Assign to all users and devices", "value": "AllDevicesAndUsers" }, |
3674 | 3701 | { "label": "Assign to Custom Group", "value": "customGroup" } |
3675 | 3702 | ] |
3676 | 3703 | }, |
|
3749 | 3776 | { "value": "donotchange", "label": "Do not change state" }, |
3750 | 3777 | { "value": "Enabled", "label": "Set to enabled" }, |
3751 | 3778 | { "value": "Disabled", "label": "Set to disabled" }, |
3752 | | - { |
3753 | | - "value": "enabledForReportingButNotEnforced", |
3754 | | - "label": "Set to report only" |
3755 | | - } |
| 3779 | + { "value": "enabledForReportingButNotEnforced", "label": "Set to report only" } |
3756 | 3780 | ] |
3757 | 3781 | } |
3758 | 3782 | ] |
|
0 commit comments