Tag
Tagged “m365”
-
Microsoft 365 Security as Code — Part 3: Running Microsoft365DSC on Linux
Microsoft365DSC was built for Windows, but our pipeline runs on Linux. This is how I made the apply step work without the Windows engine: a small parser for the compiled configuration, a careful Exchange Online session, and the permission problem that looked like a code problem.
-
Microsoft 365 Security as Code — Part 2: One benchmark, four tools
No single tool reaches every setting in the CIS Microsoft 365 benchmark. This is the order in which I choose a tool for each control, a worked example of a setting that no tool exposes, and why the code lives in several repositories with several identities.
-
Microsoft 365 Security as Code — Part 1: Before you write any code
The CIS Microsoft 365 Foundations Benchmark has 160 recommendations, and writing the code is the easy part. These are the decisions that have to come first: which profile you sign up to, what is in scope, what 'done' means, and who accepts the exceptions.