Skip to content

Commit 906a2cc

Browse files
fix(entra): add metadata description for check entra_admin_users_phishing_resistant_mfa_enabled (#8654)
1 parent 43fe9c6 commit 906a2cc

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

prowler/providers/m365/services/entra/entra_admin_users_phishing_resistant_mfa_enabled/entra_admin_users_phishing_resistant_mfa_enabled.metadata.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
"ResourceIdTemplate": "",
99
"Severity": "high",
1010
"ResourceType": "Conditional Access Policy",
11-
"Description": "Ensure ",
11+
"Description": "This check verifies that phishing-resistant MFA strength is required for all administrator accounts. Phishing-resistant MFA includes authentication methods that are resistant to phishing attacks and MFA fatigue attacks compared to weaker methods like SMS or push notifications.",
1212
"Risk": "Administrators using weaker MFA methods, such as SMS or push notifications, are vulnerable to phishing attacks and MFA fatigue attacks. Attackers can intercept codes or trick users into approving fraudulent authentication requests, leading to unauthorized access to critical systems.",
1313
"RelatedUrl": "https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-admin-phish-resistant-mfa",
1414
"Remediation": {

0 commit comments

Comments
 (0)