Open
Description
This is a similar bug to #859
Check CIS.M365.2.1.2 checks for a policy name 'default' instead of the active, default one (file Test-MtCisAttachmentFilter.ps1):
# We grab the default policy as that is what CIS checks
$policy = $policies | Where-Object { $_.Name -eq 'Default' }This only checks default Microsoft policy, which at least in my tenats have 'EnableFileFilter' disabled. Wouldn't it make more sense to check the actual default policy like:
# We grab the default policy as that is what CIS checks
$policy = $policies | Where-Object { $_.IsDefault -eq $true}Environment
Maester-Version: 1.1.2
PS-Version: 7.5.1
Kind regards
Christian