Skip to content

Commit 6573e25

Browse files
silverhacksilverhack
committed
Update findings
1 parent f1ccdf5 commit 6573e25

14 files changed

+933
-78
lines changed

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-allow-users-apply-sensitivity-labels-not-enabled.json‎

Lines changed: 53 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -39,23 +39,59 @@
3939
],
4040
"compliance": [
4141
{
42-
"name": "CIS Microsoft 365 Foundations Benchmark",
43-
"version": "3.1.0",
44-
"reference": "9.1.6",
45-
"profile": "E3 Level 1"
42+
"name": "CIS Microsoft 365 Foundations Benchmark",
43+
"version": "5.0.0",
44+
"reference": "9.1.6",
45+
"profile": [
46+
"E3 Level 1",
47+
"E5 Level 1"
48+
]
4649
}
4750
],
4851
"level": "medium",
4952
"tags": [
5053

5154
],
5255
"rule": {
53-
"path": "",
56+
"path": "m365_fabric_tenant",
5457
"subPath": null,
5558
"selectCondition": {
5659

5760
},
5861
"query": [
62+
{
63+
"filter": [
64+
{
65+
"conditions": [
66+
[
67+
"settingName",
68+
"eq",
69+
"EimInformationProtectionEdit"
70+
]
71+
]
72+
}
73+
]
74+
},
75+
{
76+
"connectOperator": "and",
77+
"filter": [
78+
{
79+
"conditions": [
80+
[
81+
"enabled",
82+
"eq",
83+
"True"
84+
],
85+
[
86+
"enabledSecurityGroups.Count",
87+
"eq",
88+
"0"
89+
]
90+
],
91+
"operator": "and"
92+
}
93+
]
94+
}
5995
],
6096
"shouldExist": null,
6197
"returnObject": null,
@@ -64,6 +100,12 @@
64100
"output": {
65101
"html": {
66102
"data": {
103+
"properties": {
104+
"title": "Title",
105+
"enabled": "Enabled",
106+
"tenantSettingGroup": "Group",
107+
"enabledSecurityGroups": "Security Groups"
108+
},
67109
"expandObject": null
68110
},
69111
"table": "Normal",
@@ -76,7 +118,11 @@
76118
"actions": {
77119
"objectData": {
78120
"properties": [
79-
"*"
121+
"title",
122+
"enabled",
123+
"location",
124+
"tenantSettingGroup",
125+
"enabledSecurityGroups"
80126
],
81127
"expandObject": null,
82128
"limit": null
@@ -98,7 +144,7 @@
98144

99145
],
100146
"message": "Ensure 'Allow users to apply sensitivity labels for content' is 'Enabled'",
101-
"defaultMessage": null
147+
"defaultMessage": "Ensure 'Allow users to apply sensitivity labels for content' is 'Enabled'"
102148
},
103149
"properties": {
104150
"resourceName": null,

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-block-resourcekey-authentication-not-enabled.json‎

Lines changed: 39 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -31,23 +31,45 @@
3131
],
3232
"compliance": [
3333
{
34-
"name": "CIS Microsoft 365 Foundations Benchmark",
35-
"version": "3.1.0",
36-
"reference": "9.1.9",
37-
"profile": "E3 Level 1"
34+
"name": "CIS Microsoft 365 Foundations Benchmark",
35+
"version": "5.0.0",
36+
"reference": "9.1.9",
37+
"profile": [
38+
"E3 Level 1",
39+
"E5 Level 1"
40+
]
3841
}
3942
],
4043
"level": "medium",
4144
"tags": [
4245

4346
],
4447
"rule": {
45-
"path": "",
48+
"path": "m365_fabric_tenant",
4649
"subPath": null,
4750
"selectCondition": {
4851

4952
},
5053
"query": [
54+
{
55+
"filter": [
56+
{
57+
"conditions": [
58+
[
59+
"settingName",
60+
"eq",
61+
"BlockResourceKeyAuthentication"
62+
],
63+
[
64+
"enabled",
65+
"ne",
66+
"True"
67+
]
68+
],
69+
"operator": "and"
70+
}
71+
]
72+
}
5173
],
5274
"shouldExist": null,
5375
"returnObject": null,
@@ -56,6 +78,12 @@
5678
"output": {
5779
"html": {
5880
"data": {
81+
"properties": {
82+
"title": "Title",
83+
"enabled": "Enabled",
84+
"tenantSettingGroup": "Group",
85+
"enabledSecurityGroups": "Security Groups"
86+
},
5987
"expandObject": null
6088
},
6189
"table": "Normal",
@@ -68,7 +96,11 @@
6896
"actions": {
6997
"objectData": {
7098
"properties": [
71-
"*"
99+
"title",
100+
"enabled",
101+
"location",
102+
"tenantSettingGroup",
103+
"enabledSecurityGroups"
72104
],
73105
"expandObject": null,
74106
"limit": null
@@ -90,7 +122,7 @@
90122

91123
],
92124
"message": "Ensure 'Block ResourceKey Authentication' is 'Enabled'",
93-
"defaultMessage": null
125+
"defaultMessage": "Ensure 'Block ResourceKey Authentication' is 'Enabled'"
94126
},
95127
"properties": {
96128
"resourceName": null,

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-enabling-external-data-sharing-not-restricted.json‎

Lines changed: 53 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -33,23 +33,59 @@
3333
],
3434
"compliance": [
3535
{
36-
"name": "CIS Microsoft 365 Foundations Benchmark",
37-
"version": "3.1.0",
38-
"reference": "9.1.8",
39-
"profile": "E3 Level 1"
36+
"name": "CIS Microsoft 365 Foundations Benchmark",
37+
"version": "5.0.0",
38+
"reference": "9.1.8",
39+
"profile": [
40+
"E3 Level 1",
41+
"E5 Level 1"
42+
]
4043
}
4144
],
4245
"level": "medium",
4346
"tags": [
4447

4548
],
4649
"rule": {
47-
"path": "",
50+
"path": "m365_fabric_tenant",
4851
"subPath": null,
4952
"selectCondition": {
5053

5154
},
5255
"query": [
56+
{
57+
"filter": [
58+
{
59+
"conditions": [
60+
[
61+
"settingName",
62+
"eq",
63+
"EnableDatasetInPlaceSharing"
64+
]
65+
]
66+
}
67+
]
68+
},
69+
{
70+
"connectOperator": "and",
71+
"filter": [
72+
{
73+
"conditions": [
74+
[
75+
"enabled",
76+
"eq",
77+
"True"
78+
],
79+
[
80+
"enabledSecurityGroups.Count",
81+
"eq",
82+
"0"
83+
]
84+
],
85+
"operator": "and"
86+
}
87+
]
88+
}
5389
],
5490
"shouldExist": null,
5591
"returnObject": null,
@@ -58,6 +94,12 @@
5894
"output": {
5995
"html": {
6096
"data": {
97+
"properties": {
98+
"title": "Title",
99+
"enabled": "Enabled",
100+
"tenantSettingGroup": "Group",
101+
"enabledSecurityGroups": "Security Groups"
102+
},
61103
"expandObject": null
62104
},
63105
"table": "Normal",
@@ -70,7 +112,11 @@
70112
"actions": {
71113
"objectData": {
72114
"properties": [
73-
"*"
115+
"title",
116+
"enabled",
117+
"location",
118+
"tenantSettingGroup",
119+
"enabledSecurityGroups"
74120
],
75121
"expandObject": null,
76122
"limit": null
@@ -92,7 +138,7 @@
92138

93139
],
94140
"message": "Ensure enabling of external data sharing is restricted",
95-
"defaultMessage": null
141+
"defaultMessage": "Ensure enabling of external data sharing is restricted"
96142
},
97143
"properties": {
98144
"resourceName": null,

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-external-user-invitations-not-restricted.json‎

Lines changed: 53 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -38,23 +38,59 @@
3838
],
3939
"compliance": [
4040
{
41-
"name": "CIS Microsoft 365 Foundations Benchmark",
42-
"version": "3.1.0",
43-
"reference": "9.1.2",
44-
"profile": "E3 Level 1"
41+
"name": "CIS Microsoft 365 Foundations Benchmark",
42+
"version": "5.0.0",
43+
"reference": "9.1.2",
44+
"profile": [
45+
"E3 Level 1",
46+
"E5 Level 1"
47+
]
4548
}
4649
],
4750
"level": "medium",
4851
"tags": [
4952

5053
],
5154
"rule": {
52-
"path": "",
55+
"path": "m365_fabric_tenant",
5356
"subPath": null,
5457
"selectCondition": {
5558

5659
},
5760
"query": [
61+
{
62+
"filter": [
63+
{
64+
"conditions": [
65+
[
66+
"settingName",
67+
"eq",
68+
"ExternalSharingV2"
69+
]
70+
]
71+
}
72+
]
73+
},
74+
{
75+
"connectOperator": "and",
76+
"filter": [
77+
{
78+
"conditions": [
79+
[
80+
"enabled",
81+
"eq",
82+
"True"
83+
],
84+
[
85+
"enabledSecurityGroups.Count",
86+
"eq",
87+
"0"
88+
]
89+
],
90+
"operator": "and"
91+
}
92+
]
93+
}
5894
],
5995
"shouldExist": null,
6096
"returnObject": null,
@@ -63,6 +99,12 @@
6399
"output": {
64100
"html": {
65101
"data": {
102+
"properties": {
103+
"title": "Title",
104+
"enabled": "Enabled",
105+
"tenantSettingGroup": "Group",
106+
"enabledSecurityGroups": "Security Groups"
107+
},
66108
"expandObject": null
67109
},
68110
"table": "Normal",
@@ -75,7 +117,11 @@
75117
"actions": {
76118
"objectData": {
77119
"properties": [
78-
"*"
120+
"title",
121+
"enabled",
122+
"location",
123+
"tenantSettingGroup",
124+
"enabledSecurityGroups"
79125
],
80126
"expandObject": null,
81127
"limit": null
@@ -97,7 +143,7 @@
97143

98144
],
99145
"message": "Ensure external user invitations are restricted",
100-
"defaultMessage": null
146+
"defaultMessage": "Ensure external user invitations are restricted"
101147
},
102148
"properties": {
103149
"resourceName": null,

0 commit comments

Comments
 (0)