Skip to content

Commit 2727ed4

Browse files
silverhacksilverhack
committed
Update fabric rules
1 parent eb5be21 commit 2727ed4

10 files changed

Lines changed: 171 additions & 160 deletions

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-allow-users-apply-sensitivity-labels-not-enabled.json‎

Lines changed: 18 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -42,45 +42,47 @@
4242
"rule": {
4343
"path": "m365_fabric_tenant",
4444
"subPath": null,
45-
"selectCondition": {
46-
47-
},
45+
"selectCondition":[
46+
"settingName",
47+
"eq",
48+
"EimInformationProtectionEdit"
49+
],
4850
"query": [
4951
{
5052
"filter": [
5153
{
5254
"conditions": [
5355
[
54-
"settingName",
56+
"enabled",
5557
"eq",
56-
"EimInformationProtectionEdit"
58+
"True"
59+
],
60+
[
61+
"enabledSecurityGroups.Count",
62+
"gt",
63+
"0"
5764
]
58-
]
65+
],
66+
"operator": "and"
5967
}
6068
]
6169
},
62-
{
63-
"connectOperator": "and",
70+
{
71+
"connectOperator": "or",
6472
"filter": [
6573
{
6674
"conditions": [
6775
[
6876
"enabled",
6977
"eq",
7078
"True"
71-
],
72-
[
73-
"enabledSecurityGroups.Count",
74-
"eq",
75-
"0"
7679
]
77-
],
78-
"operator": "and"
80+
]
7981
}
8082
]
8183
}
8284
],
83-
"shouldExist": null,
85+
"shouldExist": true,
8486
"returnObject": null,
8587
"removeIfNotExists": null
8688
},

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-enabling-external-data-sharing-not-restricted.json‎

Lines changed: 19 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -40,45 +40,47 @@
4040
"rule": {
4141
"path": "m365_fabric_tenant",
4242
"subPath": null,
43-
"selectCondition": {
44-
45-
},
43+
"selectCondition":[
44+
"settingName",
45+
"eq",
46+
"EnableDatasetInPlaceSharing"
47+
],
4648
"query": [
4749
{
4850
"filter": [
4951
{
5052
"conditions": [
5153
[
52-
"settingName",
54+
"enabled",
5355
"eq",
54-
"EnableDatasetInPlaceSharing"
56+
"True"
57+
],
58+
[
59+
"enabledSecurityGroups.Count",
60+
"gt",
61+
"0"
5562
]
56-
]
63+
],
64+
"operator": "and"
5765
}
5866
]
5967
},
60-
{
61-
"connectOperator": "and",
68+
{
69+
"connectOperator": "or",
6270
"filter": [
6371
{
6472
"conditions": [
6573
[
6674
"enabled",
6775
"eq",
68-
"True"
69-
],
70-
[
71-
"enabledSecurityGroups.Count",
72-
"eq",
73-
"0"
76+
"False"
7477
]
75-
],
76-
"operator": "and"
78+
]
7779
}
7880
]
7981
}
8082
],
81-
"shouldExist": null,
83+
"shouldExist": true,
8284
"returnObject": null,
8385
"removeIfNotExists": null
8486
},

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-external-user-invitations-not-restricted.json‎

Lines changed: 19 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -41,45 +41,47 @@
4141
"rule": {
4242
"path": "m365_fabric_tenant",
4343
"subPath": null,
44-
"selectCondition": {
45-
46-
},
44+
"selectCondition":[
45+
"settingName",
46+
"eq",
47+
"ExternalSharingV2"
48+
],
4749
"query": [
4850
{
4951
"filter": [
5052
{
5153
"conditions": [
5254
[
53-
"settingName",
55+
"enabled",
5456
"eq",
55-
"ExternalSharingV2"
57+
"True"
58+
],
59+
[
60+
"enabledSecurityGroups.Count",
61+
"gt",
62+
"0"
5663
]
57-
]
64+
],
65+
"operator": "and"
5866
}
5967
]
6068
},
61-
{
62-
"connectOperator": "and",
69+
{
70+
"connectOperator": "or",
6371
"filter": [
6472
{
6573
"conditions": [
6674
[
6775
"enabled",
6876
"eq",
69-
"True"
70-
],
71-
[
72-
"enabledSecurityGroups.Count",
73-
"eq",
74-
"0"
77+
"False"
7578
]
76-
],
77-
"operator": "and"
79+
]
7880
}
7981
]
8082
}
8183
],
82-
"shouldExist": null,
84+
"shouldExist": true,
8385
"returnObject": null,
8486
"removeIfNotExists": null
8587
},

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-guest-access-to-content-not-restricted.json‎

Lines changed: 19 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -40,45 +40,47 @@
4040
"rule": {
4141
"path": "m365_fabric_tenant",
4242
"subPath": null,
43-
"selectCondition": {
44-
45-
},
43+
"selectCondition":[
44+
"settingName",
45+
"eq",
46+
"ElevatedGuestsTenant"
47+
],
4648
"query": [
4749
{
4850
"filter": [
4951
{
5052
"conditions": [
5153
[
52-
"settingName",
54+
"enabled",
5355
"eq",
54-
"ElevatedGuestsTenant"
56+
"True"
57+
],
58+
[
59+
"enabledSecurityGroups.Count",
60+
"gt",
61+
"0"
5562
]
56-
]
63+
],
64+
"operator": "and"
5765
}
5866
]
5967
},
60-
{
61-
"connectOperator": "and",
68+
{
69+
"connectOperator": "or",
6270
"filter": [
6371
{
6472
"conditions": [
6573
[
6674
"enabled",
6775
"eq",
68-
"True"
69-
],
70-
[
71-
"enabledSecurityGroups.Count",
72-
"eq",
73-
"0"
76+
"False"
7477
]
75-
],
76-
"operator": "and"
78+
]
7779
}
7880
]
7981
}
8082
],
81-
"shouldExist": null,
83+
"shouldExist": true,
8284
"returnObject": null,
8385
"removeIfNotExists": null
8486
},

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-guest-user-access-not-restricted.json‎

Lines changed: 19 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -40,45 +40,47 @@
4040
"rule": {
4141
"path": "m365_fabric_tenant",
4242
"subPath": null,
43-
"selectCondition": {
44-
45-
},
43+
"selectCondition":[
44+
"settingName",
45+
"eq",
46+
"AllowGuestUserToAccessSharedContent"
47+
],
4648
"query": [
4749
{
4850
"filter": [
4951
{
5052
"conditions": [
5153
[
52-
"settingName",
54+
"enabled",
5355
"eq",
54-
"AllowGuestUserToAccessSharedContent"
56+
"True"
57+
],
58+
[
59+
"enabledSecurityGroups.Count",
60+
"gt",
61+
"0"
5562
]
56-
]
63+
],
64+
"operator": "and"
5765
}
5866
]
5967
},
60-
{
61-
"connectOperator": "and",
68+
{
69+
"connectOperator": "or",
6270
"filter": [
6371
{
6472
"conditions": [
6573
[
6674
"enabled",
6775
"eq",
68-
"True"
69-
],
70-
[
71-
"enabledSecurityGroups.Count",
72-
"eq",
73-
"0"
76+
"False"
7477
]
75-
],
76-
"operator": "and"
78+
]
7779
}
7880
]
7981
}
8082
],
81-
"shouldExist": null,
83+
"shouldExist": true,
8284
"returnObject": null,
8385
"removeIfNotExists": null
8486
},

‎rules/findings/Microsoft365/Microsoft Fabric/CIS3.1/fabric-interact-with-r-and-python-not-disabled.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@
5757
],
5858
[
5959
"enabled",
60-
"ne",
60+
"eq",
6161
"True"
6262
]
6363
],

0 commit comments

Comments
 (0)