What's New
Monkey365 v0.99 is a maintenance release that includes several fixes and improvements to reporting, output handling, and Microsoft Graph application registration.
Improvements & Fixes
HTML Report
- Fixed a layout overflow in the HTML report when rendering long text.
- Updated the markdown for several Azure rules to improve formatting and prevent content overflow.
Output Directory
Issue #185 has been addressed.
When -OutDir is not specified, Monkey365 now stores all output in the current working directory. This provides a more consistent and predictable default behavior across different environments.
This change is one of the first steps toward better support for automated execution in future releases, including CI/CD pipelines, GitHub Actions, and other build and automation platforms. The documentation has also been updated:
Microsoft Graph Authentication
Updated the Microsoft Graph scopes used by the Register-Monkey365Application utility.
The authentication documentation has also been updated to reflect the current registration process and required permissions:
What's Coming Next
The next release is expected to include close to one hundred Microsoft Entra ID rules, together with additional improvements to the dedicated Entra ID ruleset introduced in recent releases.
Once the Microsoft Entra work is complete, Monkey365 will include a dedicated Microsoft Entra ID ruleset, maintained independently from the Azure and Microsoft 365 benchmarks, together with a large set of new security checks focused exclusively on Microsoft Entra environments.
The screenshots below shows a small sample of the rules currently under development and being validated.
Once this work is finished, Monkey365 will be able to identify misconfigurations across a much broader range of Microsoft Entra scenarios, including:
- App Registrations
- Conditional Access Policies
- Enterprise Applications
- Role Assignments
- Privileged Access Configurations
- Identity Security Controls
- Additional Microsoft Entra attack surface checks
Progress is being tracked in:
Feedback
If you encounter any issues, notice unexpected behavior, or have ideas for new features, please let me know.
Contributions of all kinds are welcome:
- Report issues
- Request new features
- Share feedback
- Suggest new security checks or improvements
Feedback from the community helps improve future releases.
Documentation
For installation instructions, usage examples, architecture details, supported commands, and the full project documentation, visit:
- Documentation: https://silverhack.github.io/monkey365/
- Project repository: https://github.com/silverhack/monkey365
- Previous release: https://github.com/silverhack/monkey365/releases/tag/v0.98
- Full Changelog: v0.98.5...v0.99