Issues

• MT.1005 reports a raw %TestResult% when no user-targeted Conditional Access policy exists

  maester365/maester#2814 · Filter by author julien-ly opened on Nov 14, 2026

• MT.1181 passes for a high agent risk block policy whatever agents and resources it targets

  maester365/maester#2813 · Filter by author julien-ly opened on Nov 14, 2026

• PIM alert checks (MT.1029–MT.1032) pass when the alert has never been scanned

  maester365/maester#2803 · Filter by author julien-ly opened on Nov 13, 2026
  1

• 🪲 MT.1058 misses full_access_as_app: an app role from another resource resolves to nothing and the app drops out silently

  maester365/maester#2802 · Filter by author earbona23 opened on Nov 13, 2026
  5

• No check under tests/ad/ escapes directory data in its result markdown (0 of 270; 77 print a name into a table)

  maester365/maester#2796 · Filter by author earbona23 opened on Nov 11, 2026
  1

• Packs: install from a private repository without a token in an environment variable

  maester365/maester#2790 · Filter by author merill opened on Nov 11, 2026

• Proposal to map Maester checks to the NIS2 Implementing Regulation (EU) 2024/2690 (Annex section 11 pilot)

  maester365/maester#2781 · Filter by author julien-ly opened on Nov 10, 2026

• 🪲 MT.1065 Test fails despite soft delete state "AlwaysON"

  bugstatus: needs triage
  maester365/maester#2779 · Filter by author HarryLudlow opened on Nov 10, 2026
  1

• Design: shared settings as test parameters, and one naming convention for parameters

  enhancementstatus: accepted
  maester365/maester#2775 · Filter by author merill opened on Nov 10, 2026

• Idea: tenant pins, tests Maester writes for your tenant from what its security depends on

  enhancementproduct: entraproduct: exchangeproduct: intunestatus: needs decision
  maester365/maester#2745 · Filter by author merill opened on Nov 9, 2026
  1

• Add DISA STIG frameworks (Entra ID and Intune first)

  maester365/maester#2738 · Filter by author merill opened on Nov 9, 2026

• 🙏 New tests: open Entra ID Protection risk detections, one result per detection type (users and workload identities)

  enhancementnew testproduct: entrastatus: in progress
  maester365/maester#2730 · Filter by author merill opened on Nov 8, 2026
  1

• 🪲 15 checks added after #2254 escape tenant names with HtmlEncode instead of Get-MtSafeMarkdown

  maester365/maester#2711 · Filter by author earbona23 opened on Nov 7, 2026
  4

• MT.1118 and MT.1208 declare Severity Medium but report High at runtime

  maester365/maester#2692 · Filter by author chadmcox opened on Nov 5, 2026
  1

• 🪲 CIS.M365.5.2.2.7 and CIS.M365.5.2.2.8 - failing if policies are split up in two policies

  bugstatus: needs triage
  maester365/maester#2650 · Filter by author blindzero opened on Nov 2, 2026
  3

• 🙏 ASD suite: extend Essential Eight coverage with checks vetted against the assessment process guide

  enhancementstatus: needs triage
  maester365/maester#2623 · Filter by author Gbenrotto opened on Oct 31, 2026

• 🪲 MT.1098 does not consider policies that is ready for deployment but is first enabled after first registration

  bugstatus: needs triage
  maester365/maester#2595 · Filter by author Mynster9361 opened on Oct 28, 2026
  4

• 🪲 CIS.M365.5.2.3.5 and CISA.MS.AAD.3.3: Mismatch Test result and Test documentation and rationale

  bug
  maester365/maester#2565 · Filter by author blindzero opened on Oct 26, 2026
  5

• Proposal: Entra test for app registrations with wildcard or plain-http redirect URIs

  maester365/maester#2564 · Filter by author GrantZero604 opened on Oct 26, 2026

• Research: Purview Compliance Manager score

  enhancementproduct: purviewquestion
  maester365/maester#2521 · Filter by author merill opened on Oct 23, 2026
  1

• Research: Exposure Management initiatives and metrics API

  enhancementproduct: defenderquestion
  maester365/maester#2520 · Filter by author merill opened on Oct 23, 2026
  2

• Intune: device compliance and security baseline status

  enhancementnew testproduct: intune
  maester365/maester#2519 · Filter by author merill opened on Oct 23, 2026

• Entra ID Protection: unremediated risky users and risky workload identities

  enhancementnew testproduct: entra
  maester365/maester#2518 · Filter by author merill opened on Oct 23, 2026

• Defender Vulnerability Management: device security recommendations and exposure score

  enhancementnew testproduct: defender
  maester365/maester#2517 · Filter by author merill opened on Oct 23, 2026

• Defender for Cloud: attack paths (Defender CSPM)

  enhancementnew testproduct: azure
  maester365/maester#2516 · Filter by author merill opened on Oct 23, 2026