Update docs to the descriptions in Foundations document to streamline all of them and reference to CIS Microsoft 365 Foundations Benchmark v6.0.1 in Tests#1585
Conversation
…t test to verify existing test is updated to new framework version
…v6.0.1 next up going through existing content and markdown details
… diffrent cis tests
… all of them and reference to CIS Microsoft 365 Foundations Benchmark v6.0.1 in Tests
Up to standards ✅🟢 Issues
|
There was a problem hiding this comment.
Pull request overview
Updates Maester’s CIS Microsoft 365 Foundations Benchmark content to align with CIS M365 Foundations Benchmark v6.0.1, including documentation refreshes and CIS test/tag updates, and splits Teams controls 8.2.2 and 8.2.3 into separate tests.
Changes:
- Update CIS benchmark version references (v5.0.0 → v6.0.1) across PowerShell cmdlets, markdown docs, and Pester test tags.
- Add a dedicated CIS 8.2.3 test (
Test-MtCisCommunicateInitiateExternalTeamsUsers) and corresponding docs/tests/exports. - Expand and normalize remediation guidance in CIS markdown docs (rationale/impact/PowerShell steps/links).
Reviewed changes
Copilot reviewed 113 out of 113 changed files in this pull request and generated 9 comments.
Show a summary per file
| File | Description |
|---|---|
| website/versioned_docs/version-2.0.0/tests/cis/readme.md | Updates CIS overview to v6.0.1 and refreshes the CIS control-to-cmdlet mapping table. |
| tests/cis/Test-MtCisZAP.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisWeakAuthenticationMethodsDisabled.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisUserOwnedAppsRestricted.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisThirdPartyStorageServicesRestricted.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisThirdPartyFileSharing.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisThirdPartyApplicationsDisallowed.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisThirdPartyAndCustomApps.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisTeamsReportSecurityConcerns.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisTeamsLobbyBypass.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSharedMailboxSignIn.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSafeLink.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSafeAttachmentsAtpPolicy.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSafeAttachment.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisSafeAntiPhishingPolicy.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisPasswordExpiry.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisOutboundSpamFilterPolicy.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisInternalMalwareNotification.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisHostedConnectionFilterPolicy.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisGlobalAdminCount.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisFormsPhishingProtectionEnabled.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisEnsureUserConsentToAppsDisallowed.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisEnsureGuestUserDynamicGroup.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisEnsureGuestAccessRestricted.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisDkim.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisDevicesWithoutCompliancePolicyMarked.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisCustomerLockBox.Tests.ps1 | Updates CIS version tag to v6.0.1 and minor formatting tweaks. |
| tests/cis/Test-MtCisCreateTenantDisallowed.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisConnectionFilterSafeList.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisCommunicateWithUnmanagedTeamsUsers.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.Tests.ps1 | Adds new Pester coverage for CIS 8.2.3. |
| tests/cis/Test-MtCisCloudAdmin.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisCalendarSharing.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisAuditLogSearch.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisAttachmentFilterComprehensive.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisAttachmentFilter.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCisAdminConsentWorkflowEnabled.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| tests/cis/Test-MtCis365PublicGroup.Tests.ps1 | Updates CIS version tag to v6.0.1. |
| powershell/public/cis/Test-MtCisZAP.ps1 | Updates CIS benchmark reference to v6.0.1 in comment-based help. |
| powershell/public/cis/Test-MtCisZAP.md | Refreshes CIS 2.4.4 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisWeakAuthenticationMethodsDisabled.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisWeakAuthenticationMethodsDisabled.md | Refreshes CIS 5.2.3.5 documentation, adds rationale/impact/PowerShell guidance, updates v6.0.1 refs. |
| powershell/public/cis/Test-MtCisUserOwnedAppsRestricted.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisUserOwnedAppsRestricted.md | Refreshes CIS 1.3.4 documentation and adds PowerShell remediation. |
| powershell/public/cis/Test-MtCisThirdPartyStorageServicesRestricted.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisThirdPartyStorageServicesRestricted.md | Refreshes CIS 1.3.7 documentation and adds PowerShell remediation. |
| powershell/public/cis/Test-MtCisThirdPartyFileSharing.ps1 | Updates CIS benchmark reference and uses explicit -Identity Global for Teams client configuration retrieval. |
| powershell/public/cis/Test-MtCisThirdPartyFileSharing.md | Refreshes CIS 8.1.1 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisThirdPartyApplicationsDisallowed.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisThirdPartyApplicationsDisallowed.md | Refreshes CIS 5.1.2.2 documentation and adds PowerShell remediation. |
| powershell/public/cis/Test-MtCisThirdPartyAndCustomApps.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisThirdPartyAndCustomApps.md | Refreshes CIS 8.4.1 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisTeamsReportSecurityConcerns.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisTeamsReportSecurityConcerns.md | Refreshes CIS 8.6.1 documentation and adds PowerShell guidance/links. |
| powershell/public/cis/Test-MtCisTeamsLobbyBypass.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisTeamsLobbyBypass.md | Refreshes CIS 8.5.3 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisSharedMailboxSignIn.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSharedMailboxSignIn.md | Refreshes CIS 1.2.2 documentation and adds PowerShell guidance/links. |
| powershell/public/cis/Test-MtCisSafeLink.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSafeLink.md | Refreshes CIS 2.1.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisSafeAttachmentsAtpPolicy.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSafeAttachmentsAtpPolicy.md | Refreshes CIS 2.1.5 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisSafeAttachment.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSafeAttachment.md | Refreshes CIS 2.1.4 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisSafeAntiPhishingPolicy.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisSafeAntiPhishingPolicy.md | Refreshes CIS 2.1.7 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisPasswordExpiry.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisPasswordExpiry.md | Refreshes CIS 1.3.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisOutboundSpamFilterPolicy.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisOutboundSpamFilterPolicy.md | Refreshes CIS 2.1.6 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisInternalMalwareNotification.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisInternalMalwareNotification.md | Refreshes CIS 2.1.3 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisHostedConnectionFilterPolicy.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisHostedConnectionFilterPolicy.md | Refreshes CIS 2.1.12 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisGlobalAdminCount.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisGlobalAdminCount.md | Refreshes CIS 1.1.3 documentation and adds links, updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisFormsPhishingProtectionEnabled.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisFormsPhishingProtectionEnabled.md | Refreshes CIS 1.3.5 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisEnsureUserConsentToAppsDisallowed.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisEnsureUserConsentToAppsDisallowed.md | Refreshes CIS 5.1.5.1 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisEnsureGuestUserDynamicGroup.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisEnsureGuestUserDynamicGroup.md | Refreshes CIS 5.1.3.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisEnsureGuestAccessRestricted.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisEnsureGuestAccessRestricted.md | Refreshes CIS 5.1.6.2 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisDkim.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisDkim.md | Refreshes CIS 2.1.9 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisDevicesWithoutCompliancePolicyMarked.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisDevicesWithoutCompliancePolicyMarked.md | Refreshes CIS 4.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisCustomerLockBox.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisCustomerLockBox.md | Refreshes CIS 1.3.6 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisCreateTenantDisallowed.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisCreateTenantDisallowed.md | Refreshes CIS 5.1.2.3 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisConnectionFilterSafeList.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisConnectionFilterSafeList.md | Refreshes CIS 2.1.13 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisCommunicateWithUnmanagedTeamsUsers.ps1 | Updates CIS benchmark reference and adjusts logic to check org setting / external access policy. |
| powershell/public/cis/Test-MtCisCommunicateWithUnmanagedTeamsUsers.md | Refreshes CIS 8.2.2 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.ps1 | Adds new CIS 8.2.3 cmdlet to check inbound initiation setting for unmanaged Teams users. |
| powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.md | Adds new CIS 8.2.3 documentation and remediation guidance. |
| powershell/public/cis/Test-MtCisCloudAdmin.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisCloudAdmin.md | Refreshes CIS 1.1.1 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCisCalendarSharing.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisCalendarSharing.md | Refreshes CIS 1.3.3 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisAuditLogSearch.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisAuditLogSearch.md | Refreshes CIS 3.1.1 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisAttachmentFilterComprehensive.ps1 | Updates CIS benchmark reference to v6.0.1 and adjusts extension list contents. |
| powershell/public/cis/Test-MtCisAttachmentFilterComprehensive.md | Refreshes CIS 2.1.11 documentation and updates extension list formatting/links. |
| powershell/public/cis/Test-MtCisAttachmentFilter.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCisAttachmentFilter.md | Refreshes CIS 2.1.2 documentation and adds PowerShell remediation/links. |
| powershell/public/cis/Test-MtCisAdminConsentWorkflowEnabled.ps1 | Updates CIS benchmark reference and adjusts formatting for readability. |
| powershell/public/cis/Test-MtCisAdminConsentWorkflowEnabled.md | Refreshes CIS 5.1.5.2 documentation and updates references to v6.0.1. |
| powershell/public/cis/Test-MtCis365PublicGroup.ps1 | Updates CIS benchmark reference to v6.0.1. |
| powershell/public/cis/Test-MtCis365PublicGroup.md | Refreshes CIS 1.2.1 documentation and adds links, updates references to v6.0.1. |
| powershell/Maester.psd1 | Exports the new CIS 8.2.3 cmdlet from the module manifest. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.ps1
Outdated
Show resolved
Hide resolved
powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.ps1
Outdated
Show resolved
Hide resolved
powershell/public/cis/Test-MtCisCommunicateInitiateExternalTeamsUsers.ps1
Outdated
Show resolved
Hide resolved
powershell/public/cis/Test-MtCisDevicesWithoutCompliancePolicyMarked.md
Outdated
Show resolved
Hide resolved
…was updated so a few was missing in the list even though they were implemented
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 113 out of 113 changed files in this pull request and generated 4 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
@copilot apply changes based on the comments in this thread |
… the website which means the links would be broken when building the maester application in docusaurus @SamErde please take a look at this one and see if it is up to par :)
Description
Updates docs and complete CIS Microsoft 365 Foundations Benchmark from v5.0.0 to v6.0.1
All existing commands that has seen updates between version v5.0.0 to v6.0.1 has been updated so they correctly relate to v6.0.1
Split out teams tests 8.2.2 - 8.2.3 so it shows the diffrent tests run and also has the correct information/documentation and reference for each
Updated documentation on existing CIS tests to reflect documentation in CIS Microsoft 365 Foundations Benchmark documentation document
List of commands that has seen updates following the update of versions:
Test-MtCisAttachmentFilterComprehensive.ps1
Test-MtCisCommunicateInitiateExternalTeamsUsers
Test-MtCisCommunicateWithUnmanagedTeamsUsers
Updated all pester tests so it says "CIS M365 v6.0.1" instead of "CIS M365 v5.0.0"
Updated Readme.md in version-2.0.0 website but not in version 1 i was unsure if both should be updated?
Contribution Checklist
Before submitting this PR, please confirm you have completed the following:
/powershell/tests/pester.ps1on your local system.Join us at the Maester repository discussions 💬 or Entra Discord 🧑💻 for more help and conversations!