All pull requests

Pull requests

• feat(ad): verify NTAuth CA certificate paths against published roots

  #2812·FiraSenax opened Nov 14, 2026Contributor·

  ·
  3

• fix(entra): show the detected emergency access account when MT.1005 passes

  #2811·julien-ly opened Nov 14, 2026Contributor·1 of 4 tasks·

  ·
  9

• fix: restore FiraSenax test contributor credits

  #2810·FiraSenax opened Nov 14, 2026Contributor·5 of 6 tasks·

  ·
  3

• docs: add julien-ly contributor profile

  #2809·julien-ly opened Nov 14, 2026Contributor·1 of 4 tasks·

  ·
  2

• docs: add FiraSenax contributor profile

  #2808·FiraSenax opened Nov 14, 2026Contributor·3 of 4 tasks·

  ·
  2

• fix(entra): MT.1058 resolves each app role on its own API and counts full_access_as_app

  #2807·julien-ly opened Nov 13, 2026Contributor·4 tasks done·

  ·
  1

  14

• fix(ad): handle incomplete AD CS enrollment prerequisite evidence

  #2806·FiraSenax opened Nov 13, 2026Contributor·4 of 5 tasks·

  ·
  12

• fix(entra): skip PIM alert checks until PIM has scanned the alert

  #2805·julien-ly opened Nov 13, 2026Contributor·4 tasks done·

  ·
  1

  4

• Add AD CS published-template prerequisite analysis

  #2804·rolling-code opened Nov 13, 2026·

  ·
  8

• fix(report): preserve tenant names in CIS and Entra check results

  #2800·FiraSenax opened Nov 12, 2026Contributor·

  ·
  8

• feat: add CISA SCuBA Power Platform baseline checks

  #2799·JeremyFinney-lgtm opened Nov 12, 2026Contributor·4 tasks done·

  ·
  39

• feat(cisa): implement Power BI SCuBA baseline alignment

  #2798·JeremyFinney-lgtm opened Nov 11, 2026Contributor·4 tasks done·

  ·
  24

• fix(tests): stop the runner's own variables leaking into the tests it runs

  #2797·earbona23 opened Nov 11, 2026Contributor·

  ·
  6

• fix(tests): add the missing byte order mark to Invoke-MtPackGitHubRequest.Tests.ps1

  #2795·earbona23 opened Nov 11, 2026Contributor·

  ·
  8

• fix(intune): ask for a MAM enrolment on the Windows Security Center connector

  #2794·earbona23 opened Nov 11, 2026Contributor·

  ·
  6

• Add CISA Teams baseline checks

  #2789·JeremyFinney-lgtm opened Nov 11, 2026Contributor·4 tasks done·

  ·
  19

• feat(ad): add gMSA password authorization tests

  #2786·rolling-code opened Nov 10, 2026·

  ·
  17

• feat(ad): add DNS zone authorization tests

  #2785·rolling-code opened Nov 10, 2026·

  ·
  21

• feat(ad): add replication naming-context coverage tests

  #2784·rolling-code opened Nov 10, 2026·

  ·
  14

• feat(ad): add authentication policy and silo posture tests

  #2783·rolling-code opened Nov 10, 2026·

  ·
  8

• feat(entra): add MT.1276 hard deletion protection check

  #2782·agnivesh opened Nov 10, 2026Contributor·4 tasks done·

  ·
  10

• fix(graph): propagate exhausted hunting query throttling

  #2773·FiraSenax opened Nov 10, 2026Contributor·

  ·
  2

• CISA: Security Suite migration (Part 5 of 5) – Purview DLP 3.1–3.5

  #2772·JeremyFinney-lgtm opened Nov 10, 2026Contributor·4 tasks done·

  ·
  26

• CISA: Security Suite migration (Part 4 of 5) – Safe Links 7.1–7.3 and allow lists 8.1–8.2

  #2771·JeremyFinney-lgtm opened Nov 10, 2026Contributor·3 of 4 tasks·

  ·
  22

• CISA: Security Suite migration (Part 3 of 5) – audit 5.1–5.2 and spam 6.1–6.2

  #2770·JeremyFinney-lgtm opened Nov 10, 2026Contributor·4 tasks done·

  ·
  9