Microsoft 365
Voor informatie over de koppeling tussen Attic en Microsoft 365 cloud diensten.
Algemeen
Onboarding
Logging
Multi-Factor Authenticatie (MFA)
- CHK-1052 - Emergency Admin Password Changed
- CHK-1053 - Emergency Admin Password Needs to Change
- CHK-1135 - Emergency Admin
- CHK-1139 - MFA Passwordless Login
- CHK-1140 - Pushnotificaties Microsoft Authenticator
- CHK-1141 - MFA Number Matching
Toegang
- CHK-1056 - Security Group Creation Allowed
- CHK-1136 - Privileged Identity Management (PIM)
- CHK-1143 - User Acess to Azure AD in portal is restricted
- CHK-1150 - Schakel AzureAD Sync Softmatch uit
- CHK-1155 - Users should not be allowed to create tenants
- CHK-1522 - External sharing by guests should be disabled
Sterke Wachtwoorden
E-mail Bescherming
- CHK-1057 - Autodiscover not configured
- CHK-1058 - Phishing Mailtips Enabled
- CHK-1059 - SafeLinks should be enabled
- CHK-1060 - External storage should be disabled in Outlook
- CHK-1061 - No domain should be whitelisted from spam/malware scanning
- CHK-1062 - Safe Attachments should be enabled
OAuth Apps
Monitoring
Gasten
Systeem
Malware
Checks
- CHK-1000 - Microsoft Exchange Online Access
- CHK-1001 - Audit logging coming in
- CHK-1002 - Audit Log Enabled
- CHK-1003 - Mailbox auditing settings correct
- CHK-1009 - Organization Customization Enabled
- CHK-1020 - Bestandsfilter voor e-mail bijlagen