CyberStrikeus/CyberStrike - Seite 172

cis-azure-foundations-5-2-2

Ensure an exclusionary geographic Conditional Access policy is considered

Quellsprache: Englisch

cis-azure-foundations-5-2-3

Ensure an exclusionary device code flow policy is considered

Quellsprache: Englisch

cis-azure-foundations-5-2-4

Ensure a multifactor authentication policy exists for all users

Quellsprache: Englisch

cis-azure-foundations-5-2-5

Ensure multifactor authentication is required for risky sign-ins

Quellsprache: Englisch

cis-azure-foundations-5-2-6

Ensure multifactor authentication is required for Windows Azure Service Management API

Quellsprache: Englisch

cis-azure-foundations-5-2-7

Ensure multifactor authentication is required to access Microsoft Admin Portals

Quellsprache: Englisch

cis-azure-foundations-5-2-8

Ensure a Token Protection Conditional Access policy is considered

Quellsprache: Englisch

cis-azure-foundations-5-20

Ensure 'Owners can manage group membership requests in My Groups' is set to 'No'

Quellsprache: Englisch

cis-azure-foundations-5-21

Ensure 'Users can create Microsoft 365 groups in Azure portals, API or PowerShell' is set to 'No'

Quellsprache: Englisch

cis-azure-foundations-5-22

Ensure 'Require Multifactor Authentication to register or join devices with Microsoft Entra' is set to 'Yes'

Quellsprache: Englisch

cis-azure-foundations-5-23

Ensure no custom subscription administrator roles exist

Quellsprache: Englisch

cis-azure-foundations-5-24

Ensure a custom role is assigned permissions for administering resource locks

Quellsprache: Englisch

cis-azure-foundations-5-25

Ensure 'Subscription leaving/entering Microsoft Entra tenant' is set to 'Permit no one'

Quellsprache: Englisch

cis-azure-foundations-5-26

Ensure fewer than 5 users have global administrator assignment

Quellsprache: Englisch

cis-azure-foundations-5-27

Ensure there are between 2 and 3 subscription owners

Quellsprache: Englisch

cis-azure-foundations-5-28

Ensure passwordless authentication methods are considered

Quellsprache: Englisch

cis-azure-foundations-5-3-1

Ensure Azure admin accounts are not used for daily operations

Quellsprache: Englisch

cis-azure-foundations-5-3-2

Ensure guest users are reviewed on a regular basis

Quellsprache: Englisch

cis-azure-foundations-5-3-3

Ensure use of the 'User Access Administrator' role is restricted

Quellsprache: Englisch

cis-azure-foundations-5-3-4

Ensure all 'privileged' role assignments are periodically reviewed

Quellsprache: Englisch

cis-azure-foundations-5-3-5

Ensure disabled user accounts do not have read, write, or owner permissions

Quellsprache: Englisch

cis-azure-foundations-5-3-6

Ensure 'Tenant Creator' role assignments are periodically reviewed

Quellsprache: Englisch

cis-azure-foundations-5-3-7

Ensure all non-privileged role assignments are periodically reviewed

Quellsprache: Englisch

cis-azure-foundations-5-4

Ensure 'Restrict non-admin users from creating tenants' is set to 'Yes'

Quellsprache: Englisch

cis-azure-foundations-5-5

Ensure 'Number of methods required to reset' is set to '2'

Quellsprache: Englisch

cis-azure-foundations-5-6

Ensure account 'Lockout threshold' is less than or equal to '10'

Quellsprache: Englisch

cis-azure-foundations-5-7

Ensure account 'Lockout duration in seconds' is greater than or equal to '60'

Quellsprache: Englisch

cis-azure-foundations-5-8

Ensure 'Custom banned password list' is set to 'Enforce'

Quellsprache: Englisch

cis-azure-foundations-5-9

Ensure 'Number of days before users are asked to re-confirm their authentication information' is not set to '0'

Quellsprache: Englisch

cis-azure-foundations-6-1-1-1

Ensure that a 'Diagnostic Setting' exists for Subscription Activity Logs

Quellsprache: Englisch

cis-azure-foundations-6-1-1-10

Ensure Intune logs are captured and sent to Log Analytics

Quellsprache: Englisch

cis-azure-foundations-6-1-1-2

Ensure Diagnostic Setting captures appropriate categories

Quellsprache: Englisch

cis-azure-foundations-6-1-1-3

Ensure storage account containing activity logs is encrypted with CMK

Quellsprache: Englisch

cis-azure-foundations-6-1-1-4

Ensure that logging for Azure Key Vault is 'Enabled'

Quellsprache: Englisch

cis-azure-foundations-6-1-1-5

Ensure Network Security Group Flow logs are captured and sent to Log Analytics

Quellsprache: Englisch

cis-azure-foundations-6-1-1-6

Ensure logging for Azure AppService 'HTTP logs' is enabled

Quellsprache: Englisch

cis-azure-foundations-6-1-1-7

Ensure virtual network flow logs are captured and sent to Log Analytics

Quellsprache: Englisch

cis-azure-foundations-6-1-1-8

Ensure Microsoft Entra diagnostic setting exists to send Microsoft Graph activity logs

Quellsprache: Englisch

cis-azure-foundations-6-1-1-9

Ensure Microsoft Entra diagnostic setting exists to send Microsoft Entra activity logs

Quellsprache: Englisch

cis-azure-foundations-6-1-2-1

Ensure Activity Log Alert exists for Create Policy Assignment

Quellsprache: Englisch