Comments (2)
Thank you for your report, @sgendron50. Assuming you are using the latest ScubaGear release v1.1.1, note that any of the policies that mentions sensitive accounts requires that those accounts are defined via policy variables in a ScubaGear configuration file for each of the associated policies. So, for example, if you designate the account [email protected] as a sensitive account. Then, for MS.DEFENDER.1.4v1 you would need a configuration file that includes, at a minimum, the following:
defender:
MS.DEFENDER.1.4v1:
SensitiveAccounts:
IncludedUsers:
- [email protected]
Otherwise, the check will assume the account listed in the policy is not a sensitive account and that sensitive accounts have not been defined, which results in a warning. You can similarly define sensitive groups and domains. For a more complete configuration that sets sensitive users, groups, and domains for each of the sensitive account related policies see the example Defender configuration in https://github.com/cisagov/ScubaGear/blob/main/PowerShell/ScubaGear/Sample-Config-Files/defender-config.yaml. Note that you only need the defender
section of the configuration example now that ScubaGear supports mixing command line and config file options.
You can then run ScubaGear referencing the config file like so Invoke-Scuba -ConfigFilePath defender-sg-config.yaml -p defender
to run using the config and assess just defender.
from scubagear.
You are correct, @schrolla. Closing this issue.
from scubagear.
Related Issues (20)
- None of the Microsoft.Graph.Beta cmdlets work in GCC High HOT 5
- Uninstall modules using the required versions
- SharePoint functional test plan for the spo variant is failing/erroring for multiple policies
- Create a workflow to automatically bump PowerShell module dependencies
- New Power Platform Policy: Disable sharing PowerApps by default
- Add a flag to disable the warning dependency check for ScubaGear
- Add instructions for running ScubaGear in a container within Azure
- Issues with sharepoint authentication please help HOT 2
- Invoke-Scuba and Invoke-Scuba -ProductNames * do not assess the same products HOT 1
- The parameter sets for the Orchestrator need re-working
- Invoke-RunCached does not automatically include -LogIn $false
- ScubaGear cmdlets should not be generic
- Refactor Teams Unit Tests
- Refactor Sharepoint Unit Tests
- Refactor Power Platform Unit Tests
- Refactor EXO Unit Tests
- Refactor Defender Unit Tests
- Refactor AAD Unit Tests
- ExchangeOnlineManagement v3.5.0 fails to connect to Exchange/Defender in non-interactive mode HOT 2
- Include Group Reference URL in ScubaResults.json
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from scubagear.