Maester: Monitor your Microsoft 365 tenant’s security configuration
Maester
Monitor your Microsoft 365 tenant’s security configuration using Maester!
Maester is an open source PowerShell-based test automation framework designed to help you monitor and maintain the security configuration of your Microsoft 365 environment.
Why Maester?
As business needs evolve, we often need to make changes to our tenant configuration. As employees come and go, new features are added, and existing features are updated. How do you ensure that a change in one area doesn’t introduce a security vulnerability in another?
Take for example conditional access policies. You may have a policy that requires multi-factor authentication for a group of users. What if someone accidentally deletes the group or removes users from the group? Your conditional access policy is now ineffective.
Let’s take another scenario that is fairly common. What if the original author of the conditional access policy leaves the company and someone else makes a change to the policy without understanding the implications?
How does Maester help?
Maester provides a framework for you to bring DevOps practices to managing your Microsoft security configuration.
- Define your security policies as code and store them in a version control system.
- Continuously run tests that ensure your tenant configuration is complying with the defined policies.
- Found an incorrect configuration? Create a new test to ensure it doesn’t happen again.
- Write tests using Pester, a popular testing framework for PowerShell.
- Use the built-in tests to quickly get started with monitoring your tenant.
- Write custom tests as you introduce new configuration and codify your intent for the configuration.