Monkey365 v0.98.8

What's New

This release focuses on Azure benchmark support. Over the last few weeks, all Azure rules and rulesets have been reviewed to align them with the latest CIS Azure benchmark. As part of that work, existing rules were cleaned up, outdated checks were updated, and new ones were added where required.

---

✅ Full Support for CIS Azure Foundations Benchmark 6.0.0

Monkey365 now includes full support for CIS Azure Foundations Benchmark 6.0.0.

The update includes:

• Full support for CIS Azure Foundations Benchmark 6.0.0.
• Existing rules updated to match the latest benchmark recommendations.
• Cleanup and consolidation of older Azure rules.

Alongside those changes, dozens of new rules have been added to improve coverage across Azure services.

To see the available Microsoft 365 rules:

Invoke-Monkey365 -Instance Azure -ListRule

Or list the rules included in a specific ruleset:

Invoke-Monkey365 `
    -Instance Azure `
    -RuleSet /path_to_monkey365/rules/rulesets/cis_azure_6.0.0.json `
    -ListRule

🎯Default Azure Ruleset

Starting with this release, CIS Azure Foundations Benchmark 6.0.0 becomes the default ruleset whenever the Azure instance is selected.

As with previous releases, a different ruleset can still be selected by using the RuleSet parameter.

Example:

$p = @{
    Instance = "Azure"
    ExportTo = @("HTML")
    RuleSet = "C:\monkey365\rules\rulesets\cis_azure_6.0.0.json"
}
Invoke-Monkey365 @p

Removed Benchmark

The following legacy benchmark has been removed:

• CIS Azure Foundations Benchmark 3.0

Users still relying on Azure 3.0 should migrate to the 6.0.0 ruleset.

🧹 Cleanup & Fixes

This release also includes fixes for the following issues:

• Fixed an issue affecting missing Entra rules.
  Fixes #186

Special thanks to @qbrusa for discovering the issues.

• Fixed an issue affecting authentication when running Monkey365 from Azure Cloud Shell. The problem was caused by the Microsoft Authentication Library and prevented authentication under certain conditions.

---

What's Coming Next

The current release adds another batch of Entra ID checks, but there is still more work to complete before the ruleset is considered feature complete.

The next release is expected to include close to one hundred Microsoft Entra ID rules, together with additional improvements to the dedicated Entra ID ruleset introduced in recent releases.

Once the Microsoft Entra work is complete, Monkey365 will include a dedicated Microsoft Entra ID ruleset, maintained independently from the Azure and Microsoft 365 benchmarks, together with a large set of new security checks focused exclusively on Microsoft Entra environments.

The screenshots below shows a small sample of the rules currently under development and being validated.

Once this work is finished, Monkey365 will be able to identify misconfigurations across a much broader range of Microsoft Entra scenarios, including:

• App Registrations
• Conditional Access Policies
• Enterprise Applications
• Role Assignments
• Privileged Access Configurations
• Identity Security Controls
• Additional Microsoft Entra attack surface checks

Progress is being tracked in:

#172

---

Thanks to everyone who reported issues, submitted feedback, and helped test new rules. Your reports continue to improve Monkey365.

Full Changelog: v0.98...v098.8