o365recon
Microsoft365DSC
| o365recon | Microsoft365DSC | |
|---|---|---|
| 3 | 10 | |
| 657 | 1,405 | |
| - | 3.8% | |
| 0.0 | 10.0 | |
| almost 2 years ago | 7 days ago | |
| PowerShell | PowerShell | |
| - | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
o365recon
Microsoft365DSC
- Intune with DevOps - dev/test/prod tenants
-
Did you know that you can backup your Intune (Endpoint Manager) in M365, for free? And that MS don't back it up for you?
Or MS' own DSC solution!
- Any way to automate creation of Intune policies?
-
Does Microsoft365 DSC support Power BI for exporting config
M365 DSC documentation has a list of 'resource list' at https://github.com/microsoft/Microsoft365DSC/wiki/Resources-List but this list does not translate to a few modules we have: Defender for Identity, Power BI, Azure information protection, Defender for cloud apps, defender for O365. Are these M365 components/features supported by M365 DSC, if so under which resources? are there any gotcha's when trying to use DSC to export the config and use it on another tenant?
- As sysadmin I use many PowerShell scripts on the daily basis. To make them more accessible, organized and easy to execute I created a tool for myself using .NET 5. Decided to share tool with community, may be it might be useful for someone
-
Anyone using Micrsoft365DSC for 365 automation / documentation ?
Microsoft365DSC is an Open-Source initiative hosted on GitHub, lead by Microsoft engineers and maintained by the community. It allows you to write a definition for how your Microsoft 365 tenant should be configured, automate the deployment of that configuration, and ensures the monitoring of the defined configuration, notifying and acting on detected configuration drifts. It also allows you to extract a full-fidelity configuration out of any existing Microsoft 365 tenant. The tool covers all major Microsoft 365 workloads such as Exchange Online, Teams, Power Platforms, SharePoint and Security and Compliance.
Links about: https://microsoft365dsc.com/ https://github.com/microsoft/Microsoft365DSC DSC Community Microsoft 365 Virtual Marathon - Microsoft365DSC, The next best thing since sliced bread
-
3.1.13 Employ cryptographic mechanisms to protect the confidentiality of remote access sessions.
If handling CUI (CMMC ML3 or higher), you'll need to demonstrate practice and process maturity, take a look at Microsoft365DSC https://github.com/Microsoft/Microsoft365DSC. Combination of detective controls to implement: generate alerts if the configuration that requires encryption changes/generate logs providing positive verification that the configuration is in place; perform automated audits of the configuration on a regular schedule to validate that the configuration is in place. In both cases, retain the evidence (log files, alerts, DSC exports, etc.) so assessors can see that the configuration has been in place and that oversight is continuous and proactive.
-
How to go from helpdesk to Microsoft 365 Administrator
Use https://github.com/microsoft/Microsoft365DSC to capture your environment or making changes to it to, commit to a public repository and add to your resume.
- Managing Microsoft 365 At Scale
What are some alternatives?
Penetration-Testing-Tools - A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.
ComputerManagementDsc - DSC resources for for configuration of a Windows computer. These DSC resources allow you to perform computer management tasks, such as renaming the computer, joining a domain and scheduling tasks as well as configuring items such as virtual memory, event logs, time zones and power settings.
office365-audit-log-collector - Collect / retrieve Office365, AzureAD and DLP audit logs and output to PRTG, Azure Log Analytics Workspace, SQL, Graylog, Fluentd, and/or file output.
IntuneManagement - Copy, export, import, delete, document and compare policies and profiles in Intune and Azure with PowerShell script and WPF UI. Import ADMX files and registry settings with ADMX ingestion. View and edit PowerShell script.
monkey365 - Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.
Office365-REST-Python-Client - Microsoft 365 & Microsoft Graph Library for Python
hawk - Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
ExchangeAnalyzer - Exchange Analyzer - Checks Exchange Server 2013 or 2016 organizations for common configuration issues and recommended practices.
AzureGraph - Azure AD enumeration over MS Graph
EWS-Office365-Contact-Sync - Uses Exchange Web Services to synchronize a Global Address List in Office 365 to a user's mailbox
m365-gender-pronoun-kit - Helper scripts and guidance to add a Pronoun field (She/Her, They/Them, He/Him) to your Microsoft 365 tenant and display it in the Microsoft 365 profile card shown in Outlook, SharePoint, Delve...
IntuneBackupAndRestore - PowerShell Module that queries Microsoft Graph, and allows for cross-tenant Backup & Restore actions of your Intune Configuration.