Checks

• Onboarding
• AiTM
• Phishing
• Malware
• Logging
• Access
• Strong Passwords
• Break Glass Account
• Multi Factor Authentication (MFA)
• Email Protection
• OAuth Apps
• Abnormal Behavior
• Monitoring
• Domain & DNS
• Guests
• Teams
• System

Sentinel Rules

• RULE-1020 - Detect email forwarding rules
• RULE-1022 - Suspicious keyword in mailbox rule
• RULE-1023 - Mailbox auto-forwards
• RULE-1024 - Transport rule forwards email externally
• RULE-1026 - Transport rule with suspicious keywords
• RULE-1123 & RULE-1138 - Gastgebruiker kreeg hoge privileges

• MISP

General

• Howto: Microsoft 365 Onboarding