All pull requests

Pull requests

• Update generated test docs and contributor attribution

  #2456·maester-bot[bot] opened Oct 20, 2026Bot·

  ·
  3

• Add build image and threat model for Anthropic's OSS Scanner

  #2444·merill opened Oct 19, 2026Contributor·1 of 4 tasks·

  ·
  3

  

• fix(CIS.M365.8.6.1, CIS.M365.2.4.4): declare the Exchange Online service these Teams tests need

  #2443·earbona23 opened Oct 19, 2026Contributor·1 of 4 tasks·

  ·
  1

  2

• fix(CISA.MS.EXO.9.1): declare the ExchangeOnline service so the test skips without Exchange Online

  #2441·earbona23 opened Oct 19, 2026Contributor·1 of 4 tasks·

  ·
  1

  2

• feat(ad): parameterize thresholds in dormant, stale, trust and group tests

  #2440·soulemike opened Oct 19, 2026Contributor·4 tasks done·

  ·
  8

• Add MT1226 (Immutable subject Identifiers)

  #2438·nicolonsky opened Oct 19, 2026Contributor·3 of 4 tasks·

  ·
  6

• Fix AD issues from #2405: KDS keys, error propagation, DFS-R matching, stale computers, DACL skips

  #2437·soulemike opened Oct 19, 2026Contributor·4 tasks done·

  ·
  48

• MT.1206: Filter sign-in activity by agent appId

  #2436·Dfrank77 opened Oct 19, 2026Contributor·

  ·
  2

• MT.1223: Add Application.ReadUpdate.All to high-risk permission list

  #2434·Dfrank77 opened Oct 19, 2026Contributor·

  ·
  6

• fix(eidsca): Refresh EIDSCA checks and fix expression generation

  #2431·Cloud-Architekt opened Oct 19, 2026Collaborator·4 tasks done·

  ·
  5

• Add Maester Packs: install, pin and run third-party test packs and connectors

  #2430·merill opened Oct 19, 2026Contributor·4 tasks done·

  ·
  25

  

• feat(packs): Microsoft Zero Trust Assessment as a built-in pack

  #2429·merill opened Oct 19, 2026Contributor·4 tasks done·

  ·
  12

  

• fix(ad): allow domain name as -ActiveDirectoryServer selector

  #2428·soulemike opened Oct 18, 2026Contributor·4 tasks done·

  ·
  1

  11

• fix(ad): a principal that is both allowed and denied on a GPO is unknown

  #2426·earbona23 opened Oct 18, 2026Contributor·

  ·
  6

• docs: clarify Teams message permissions

  #2424·Doomguy-BFG9000 opened Oct 18, 2026·

  ·
  1

  2

• fix(core): resolve the Graph endpoint per request and honor -GraphBaseUri

  #2423·earbona23 opened Oct 18, 2026Contributor·

  ·
  1

  5

• feat(cis): add 18 conditional access checks for CIS M365 v7.0.0

  #2422·JeremyFinney-lgtm opened Oct 18, 2026·2 of 4 tasks·

  ·
  14

• fix(ad): set the GPO permission properties the GPOREP checks read

  #2421·merill opened Oct 18, 2026Contributor·1 of 2 tasks·

  ·
  7

• fix(ad): match AccessControlType as the DACL collector emits it (AD-DACL-08 to 12)

  #2420·merill opened Oct 18, 2026Contributor·1 of 2 tasks·

  ·
  5

• feat(cis): add 15 Entra and Intune checks for CIS M365 v7.0.0

  #2411·JeremyFinney-lgtm opened Oct 17, 2026·2 of 4 tasks·

  ·
  13

• feat(cis): add 23 Exchange, Defender and Purview checks for CIS M365 v7.0.0

  #2410·JeremyFinney-lgtm opened Oct 17, 2026·3 of 4 tasks·

  ·
  53

• feat(cis): add 17 SharePoint and Teams checks for CIS M365 v7.0.0

  #2409·JeremyFinney-lgtm opened Oct 17, 2026·3 of 4 tasks·

  ·
  10

• feat(console): add an Active Directory panel to the dashboard

  #2404·agnivesh opened Oct 16, 2026Contributor·4 tasks done·

  ·
  8

• docs(packs): packs in any language (Python, TypeScript, binaries, containers)

  #2396·merill opened Oct 16, 2026Contributor·2 of 4 tasks·

  ·
  4

  

• docs: Maester Packs design proposal (third-party packs and connectors)

  #2358·merill opened Oct 7, 2026Contributor·

  ·
  10