Search results

Revisit SharePoint external collaboration options

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1687 In cisagov/ScubaGear;

· adhilto opened on May 1, 2025

 ·  

Orca

Microsoft 365 Device Code Phishing Cyber Attack – Demonstration, Analysis and Mitigation

analysis-requiredThis issue requires review or analysis work to completeThis issue requires review or analysis work to complete

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1599 In cisagov/ScubaGear;

· tkol2022 opened on Feb 27, 2025

Proposal: Create a new Defender policy to disable PowerShell access to inboxes from non-administrative users

analysis-requiredThis issue requires review or analysis work to completeThis issue requires review or analysis work to complete

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1418 In cisagov/ScubaGear;

· tkol2022 opened on Nov 12, 2024

 ·  

Backlog

Proposal: Create a new Defender policy to check for users with their mailbox audit logging bypassed

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1417 In cisagov/ScubaGear;

· tkol2022 opened on Nov 12, 2024

 ·  

Backlog

Perform feasibility analysis on a conditional access policy to restrict service principal access from untrusted locations

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1377 In cisagov/ScubaGear;

· mitchelbaker-cisa opened on Oct 25, 2024

 ·  

Backlog

Develop and execute adversary emulation tests on high-risk service principal permissions

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1371 In cisagov/ScubaGear;

· mitchelbaker-cisa opened on Oct 22, 2024

 ·  

Backlog

Investigate ScubaGear logging capability

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1326 In cisagov/ScubaGear;

· tkol2022 opened on Sep 23, 2024

 ·  

Orca

Prototype SharePoint integration with Microsoft Entra B2B to determine if Scuba should augment policies to cover the integration

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1272 In cisagov/ScubaGear;

· tkol2022 opened on Aug 13, 2024

 ·  

Nemo

Deploy baselines to cisa.gov Drupal site

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1222 In cisagov/ScubaGear;

· mitchelbaker-cisa opened on Jul 19, 2024

 ·  

Backlog

Investigate use of token protection

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#706 In cisagov/ScubaGear;

· schrolla opened on Dec 6, 2023

 ·  

Orca

Calendar and Contact Sharing Policy Testing

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#469 In cisagov/ScubaGear;

· schrolla opened on Aug 7, 2023

 ·  

Backlog

hands-on evaluation of new AAD policy to protect device join - phase 2

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#314 In cisagov/ScubaGear;

· tkol2022 opened on May 2, 2023

 ·  

Backlog