silverhack / silverhack/monkey365

Review Microsoft Entra Checks Across Azure and Microsoft 365 Benchmarks

Open
#172 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement priority-high
Dominant language
PowerShell
Stars
1.3k
Forks
140
PR merge metrics
No merged PRs in 30d

Description

Is your feature request related to a problem? Please describe.
Review and consolidate all Microsoft Entra checks from the Microsoft 365 and Azure CIS benchmarks into a single and consistent ruleset.

As part of the rules and rulesets consolidation, all Microsoft Entra–related checks must be reviewed and consolidated. The current rules contains duplicated, outdated and mixed queries across the Azure and Microsoft 365 benchmarks. The consolidation will reduce complexity and ensure alignment with the latest CIS structure.

Describe the solution you'd like
As part of the migration process, the following should be done:

  • Review all existing Microsoft Entra checks in both benchmarks
  • Identify duplicates, outdated logic, inconsistent naming, etc..
  • Review and validate the query logic for all checks
  • Use conditions in queries where possible to allow rule reuse across different benchmarks
  • Merge them into a unified Microsoft Entra ruleset

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating all Microsoft Entra checks in the Azure and Microsoft 365 benchmarks. Compare their queries, naming, duplication, and age, then validate the logic against the latest CIS structure; done means a consistent unified Microsoft Entra ruleset with reusable conditions where possible.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, powershell
Domain
cloud, security
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.