Update docs to the descriptions in Foundations document to streamline all of them and reference to CIS Microsoft 365 Foundations Benchmark v6.0.1 in Tests#1585
Open
Mynster9361 wants to merge 5 commits intomaester365:mainfrom
Conversation
…t test to verify existing test is updated to new framework version
…v6.0.1 next up going through existing content and markdown details
… diffrent cis tests
… all of them and reference to CIS Microsoft 365 Foundations Benchmark v6.0.1 in Tests
Up to standards ✅🟢 Issues
|
Contributor
There was a problem hiding this comment.
Pull request overview
Updates Maester’s CIS Microsoft 365 Foundations Benchmark content to align with CIS M365 Foundations Benchmark v6.0.1, including documentation refreshes and CIS test/tag updates, and splits Teams controls 8.2.2 and 8.2.3 into separate tests.
Changes:
- Update CIS benchmark version references (v5.0.0 → v6.0.1) across PowerShell cmdlets, markdown docs, and Pester test tags.
- Add a dedicated CIS 8.2.3 test (
Test-MtCisCommunicateInitiateExternalTeamsUsers) and corresponding docs/tests/exports. - Expand and normalize remediation guidance in CIS markdown docs (rationale/impact/PowerShell steps/links).
Reviewed changes
Copilot reviewed 113 out of 113 changed files in this pull request and generated 9 comments.
Show a summary per file
| File | Description |
|---|---|
| website/versioned_docs/version-2.0.0/tests/cis/readme.md | Updates CIS overview to v6.0.1 and refreshes the CIS control-to-cmdlet mapping table. |
| tests/cis/Test-MtCisZAP.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisWeakAuthenticationMethodsDisabled.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisUserOwnedAppsRestricted.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisThirdPartyStorageServicesRestricted.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisThirdPartyFileSharing.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisThirdPartyApplicationsDisallowed.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisThirdPartyAndCustomApps.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisTeamsReportSecurityConcerns.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisTeamsLobbyBypass.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSharedMailboxSignIn.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSafeLink.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSafeAttachmentsAtpPolicy.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSafeAttachment.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSafeAntiPhishingPolicy.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisPasswordExpiry.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisOutboundSpamFilterPolicy.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisInternalMalwareNotification.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisHostedConnectionFilterPolicy.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisGlobalAdminCount.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisFormsPhishingProtectionEnabled.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisEnsureUserConsentToAppsDisallowed.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisEnsureGuestUserDynamicGroup.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisEnsureGuestAccessRestricted.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisDkim.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisDevicesWithoutCompliancePolicyMarked.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisCustomerLockBox.Tests.ps1 | Updates CIS version tag to v6.0.1 and minor formatting tweaks. |
| tests/cis/Test-MtCisCreateTenantDisallowed.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisConnectionFilterSafeList.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisCommunicateWithUnmanagedTeamsUsers.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.Tests.ps1 | Adds new Pester coverage for CIS 8.2.3. |
| tests/cis/Test-MtCisCloudAdmin.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisCalendarSharing.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisAuditLogSearch.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisAttachmentFilterComprehensive.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisAttachmentFilter.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisAdminConsentWorkflowEnabled.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCis365PublicGroup.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| powershell/public/cis/Test-MtCisZAP.ps1 | Updates CIS benchmark reference to v6.0.1 in comment-based help. |
| powershell/public/cis/Test-MtCisZAP.md | Refreshes CIS 2.4.4 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisWeakAuthenticationMethodsDisabled.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisWeakAuthenticationMethodsDisabled.md | Refreshes CIS 5.2.3.5 documentation, adds rationale/impact/PowerShell guidance, updates v6.0.1 refs. |
| powershell/public/cis/Test-MtCisUserOwnedAppsRestricted.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisUserOwnedAppsRestricted.md | Refreshes CIS 1.3.4 documentation and adds PowerShell remediation. |
| powershell/public/cis/Test-MtCisThirdPartyStorageServicesRestricted.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisThirdPartyStorageServicesRestricted.md | Refreshes CIS 1.3.7 documentation and adds PowerShell remediation. |
| powershell/public/cis/Test-MtCisThirdPartyFileSharing.ps1 | Updates CIS benchmark reference and uses explicit -Identity Global for Teams client configuration retrieval. |
| powershell/public/cis/Test-MtCisThirdPartyFileSharing.md | Refreshes CIS 8.1.1 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisThirdPartyApplicationsDisallowed.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisThirdPartyApplicationsDisallowed.md | Refreshes CIS 5.1.2.2 documentation and adds PowerShell remediation. |
| powershell/public/cis/Test-MtCisThirdPartyAndCustomApps.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisThirdPartyAndCustomApps.md | Refreshes CIS 8.4.1 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisTeamsReportSecurityConcerns.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisTeamsReportSecurityConcerns.md | Refreshes CIS 8.6.1 documentation and adds PowerShell guidance/links. |
| powershell/public/cis/Test-MtCisTeamsLobbyBypass.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisTeamsLobbyBypass.md | Refreshes CIS 8.5.3 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisSharedMailboxSignIn.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSharedMailboxSignIn.md | Refreshes CIS 1.2.2 documentation and adds PowerShell guidance/links. |
| powershell/public/cis/Test-MtCisSafeLink.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSafeLink.md | Refreshes CIS 2.1.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisSafeAttachmentsAtpPolicy.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSafeAttachmentsAtpPolicy.md | Refreshes CIS 2.1.5 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisSafeAttachment.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSafeAttachment.md | Refreshes CIS 2.1.4 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisSafeAntiPhishingPolicy.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSafeAntiPhishingPolicy.md | Refreshes CIS 2.1.7 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisPasswordExpiry.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisPasswordExpiry.md | Refreshes CIS 1.3.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisOutboundSpamFilterPolicy.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisOutboundSpamFilterPolicy.md | Refreshes CIS 2.1.6 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisInternalMalwareNotification.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisInternalMalwareNotification.md | Refreshes CIS 2.1.3 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisHostedConnectionFilterPolicy.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisHostedConnectionFilterPolicy.md | Refreshes CIS 2.1.12 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisGlobalAdminCount.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisGlobalAdminCount.md | Refreshes CIS 1.1.3 documentation and adds links, updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisFormsPhishingProtectionEnabled.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisFormsPhishingProtectionEnabled.md | Refreshes CIS 1.3.5 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisEnsureUserConsentToAppsDisallowed.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisEnsureUserConsentToAppsDisallowed.md | Refreshes CIS 5.1.5.1 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisEnsureGuestUserDynamicGroup.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisEnsureGuestUserDynamicGroup.md | Refreshes CIS 5.1.3.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisEnsureGuestAccessRestricted.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisEnsureGuestAccessRestricted.md | Refreshes CIS 5.1.6.2 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisDkim.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisDkim.md | Refreshes CIS 2.1.9 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisDevicesWithoutCompliancePolicyMarked.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisDevicesWithoutCompliancePolicyMarked.md | Refreshes CIS 4.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisCustomerLockBox.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisCustomerLockBox.md | Refreshes CIS 1.3.6 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisCreateTenantDisallowed.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisCreateTenantDisallowed.md | Refreshes CIS 5.1.2.3 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisConnectionFilterSafeList.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisConnectionFilterSafeList.md | Refreshes CIS 2.1.13 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisCommunicateWithUnmanagedTeamsUsers.ps1 | Updates CIS benchmark reference and adjusts logic to check org setting / external access policy. |
| powershell/public/cis/Test-MtCisCommunicateWithUnmanagedTeamsUsers.md | Refreshes CIS 8.2.2 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.ps1 | Adds new CIS 8.2.3 cmdlet to check inbound initiation setting for unmanaged Teams users. |
| powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.md | Adds new CIS 8.2.3 documentation and remediation guidance. |
| powershell/public/cis/Test-MtCisCloudAdmin.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisCloudAdmin.md | Refreshes CIS 1.1.1 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisCalendarSharing.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisCalendarSharing.md | Refreshes CIS 1.3.3 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisAuditLogSearch.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisAuditLogSearch.md | Refreshes CIS 3.1.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisAttachmentFilterComprehensive.ps1 | Updates CIS benchmark reference to v6.0.1 and adjusts extension list contents. |
| powershell/public/cis/Test-MtCisAttachmentFilterComprehensive.md | Refreshes CIS 2.1.11 documentation and updates extension list formatting/links. |
| powershell/public/cis/Test-MtCisAttachmentFilter.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisAttachmentFilter.md | Refreshes CIS 2.1.2 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisAdminConsentWorkflowEnabled.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisAdminConsentWorkflowEnabled.md | Refreshes CIS 5.1.5.2 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCis365PublicGroup.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCis365PublicGroup.md | Refreshes CIS 1.2.1 documentation and adds links, updates references to v6.0.1. |
| powershell/Maester.psd1 | Exports the new CIS 8.2.3 cmdlet from the module manifest. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.ps1
Outdated
Show resolved
Hide resolved
powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.ps1
Outdated
Show resolved
Hide resolved
powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.ps1
Outdated
Show resolved
Hide resolved
powershell/public/cis/Test-MtCisDevicesWithoutCompliancePolicyMarked.md
Outdated
Show resolved
Hide resolved
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Updates docs and complete CIS Microsoft 365 Foundations Benchmark from v5.0.0 to v6.0.1
All existing commands that has seen updates between version v5.0.0 to v6.0.1 has been updated so they correctly relate to v6.0.1
Split out teams tests 8.2.2 - 8.2.3 so it shows the diffrent tests run and also has the correct information/documentation and reference for each
Updated documentation on existing CIS tests to reflect documentation in CIS Microsoft 365 Foundations Benchmark documentation document
List of commands that has seen updates following the update of versions:
Test-MtCisAttachmentFilterComprehensive.ps1
Test-MtCisCommunicateInitiateExternalTeamsUsers
Test-MtCisCommunicateWithUnmanagedTeamsUsers
Updated all pester tests so it says "CIS M365 v6.0.1" instead of "CIS M365 v5.0.0"
Updated Readme.md in version-2.0.0 website but not in version 1 i was unsure if both should be updated?
Contribution Checklist
Before submitting this PR, please confirm you have completed the following:
/powershell/tests/pester.ps1on your local system.Join us at the Maester repository discussions 💬 or Entra Discord 🧑💻 for more help and conversations!