All pull requests

Pull requests

• feat(azure): add MT.1266 - Azure secure score per subscription

  #2712·earbona23 opened Nov 7, 2026Contributor·

  ·
  1

  7

• fix(entra): MT.1260 stop claiming a severity raise that never applies

  #2710·Dfrank77 opened Nov 7, 2026Contributor·

  ·
  6

• fix(entra): skip MT.1181 unless the tenant has Entra ID P2 and Agent 365

  #2708·julien-ly opened Nov 6, 2026·1 of 4 tasks·

  ·
  1

  20

• fix(website): the build no longer fails when the PowerShell Gallery hiccups

  #2707·earbona23 opened Nov 6, 2026Contributor·

  ·
  6

• fix(connect): request cloud-aware Graph permissions for preview checks

  #2706·Cloud-Architekt opened Nov 6, 2026Collaborator·3 of 4 tasks·

  ·
  8

• Add Entra risk remediation, drift, and delegated admin checks

  #2705·Cloud-Architekt opened Nov 6, 2026Collaborator·3 of 5 tasks·

  ·
  9

• feat(entra): add MT.1263 - medium-risk service principals should not be left unremediated in Entra ID Protection

  #2704·Dfrank77 opened Nov 6, 2026Contributor·4 tasks done·

  ·
  12

• feat(azure): Defender for Cloud recommendations and attack paths

  #2703·earbona23 opened Nov 6, 2026Contributor·

  ·
  1

  17

• fix(MT.1087): no pass when the hunting query returned nothing at all

  #2702·earbona23 opened Nov 6, 2026Contributor·

  ·
  8

• fix(cis,cisa): drop the Security & Compliance gate from tests that never use it

  #2701·earbona23 opened Nov 6, 2026Contributor·

  ·
  2

• fix(report): a crashed Pester row is an Error, not a compliance failure

  #2700·earbona23 opened Nov 6, 2026Contributor·

  ·
  1

  6

• fix(cis,ad): the last two checks of #2468 no longer pass on an absent source

  #2699·earbona23 opened Nov 6, 2026Contributor·

  ·
  1

  4

• docs: clarify module removal before upgrading from 2.x

  #2697·SamErde opened Nov 6, 2026Contributor·

  ·
  1

  24

• feat(defender): device security recommendations and exploitable software vulnerabilities

  #2695·earbona23 opened Nov 6, 2026Contributor·

  ·
  1

  9

• feat(intune): report device compliance and security baseline status

  #2694·earbona23 opened Nov 6, 2026Contributor·

  ·
  1

  6

• fix(engine): Invoke-MtTest sets the admin portal URLs outside a run

  #2693·julien-ly opened Nov 5, 2026·1 of 4 tasks·

  ·
  8

• fix(entra): keep MT.1196 and MT.1197 results when CA can't be read

  #2691·julien-ly opened Nov 5, 2026·1 of 4 tasks·

  ·
  6

• fix(cis): prevent Customer Lockbox false passes on missing config

  #2690·JeremyFinney-lgtm opened Nov 5, 2026Contributor·4 tasks done·

  ·
  2

• feat(entra): add MT.1262 - high-risk service principals should not be left unremediated in Entra ID Protection

  #2689·Dfrank77 opened Nov 5, 2026Contributor·4 tasks done·

  ·
  13

• feat(entra): add MT.1261 - medium-risk users should not be left unremediated in Entra ID Protection

  #2688·Dfrank77 opened Nov 5, 2026Contributor·4 tasks done·

  ·
  9

• fix(graph): scope the Graph response cache to the connected tenant

  #2687·earbona23 opened Nov 5, 2026Contributor·

  ·
  1

  2

• fix(ci): document every default Graph scope the smoke test consents

  #2686·earbona23 opened Nov 5, 2026Contributor·

  ·
  3

• fix(graph): cache a paged response under its own request's key

  #2685·earbona23 opened Nov 5, 2026Contributor·

  ·
  2

• feat: the defender's path (M1–M7)

  #2683·merill opened Nov 5, 2026Contributor·

  ·
  35

• Docs: getting started, choosing a baseline, and making the case for Maester

  #2678·jusso-dev opened Nov 4, 2026Contributor·2 of 4 tasks·

  ·
  13