From cb7ce31a76a1dba9bf23be9e88587484d7302bf0 Mon Sep 17 00:00:00 2001 From: Joey Verlinden Date: Wed, 10 Apr 2024 13:44:33 +0200 Subject: [PATCH] Update --- ...tityProtection-AnyApp-AnyPlatform-MFA.json | Bin ...pp-AnyPlatform-BLOCK-CountryWhitelist.json | Bin ...nyPlatform-Block-LegacyAuthentication.json | Bin ...ection-RegisterOrJoin-AnyPlatform-MFA.json | Bin ...nyApp-AnyPlatform-AuthenticationFlows.json | Bin ...AppEnforcedRestrictions-BlockDownload.json | Bin ...otection-AdminPortals-AnyPlatform-MFA.json | Bin ...tityProtection-AnyApp-AnyPlatform-MFA.json | Bin ...n-AllApps-AnyPlatform-SigninFrequency.json | Bin ...tityProtection-AnyApp-AnyPlatform-MFA.json | Bin ...ion-AnyApp-AnyPlatform-BLOCK-HighRisk.json | Bin ...acOS-SigninFrequency-UnmanagedDevices.json | Bin ...osoftIntuneEnrollment-AnyPlatform-MFA.json | Bin ...pps-AnyPlatform-BlockUnknownPlatforms.json | Bin ...Apps-AnyPlatform-CombinedRegistration.json | Bin 13778 -> 13990 bytes ...ction-AnyApp-Windows-CompliantorAADHJ.json | Bin ...tityProtection-AnyApp-AnyPlatform-MFA.json | Bin ...ps-AnyPlatform-BlockNonGuestAppAccess.json | Bin ...n-AllApps-AnyPlatform-SigninFrequency.json | Bin Config/Groups/APP_Microsoft365_E5_Dev.json | Bin 0 -> 3714 bytes .../CA-BreakGlassAccounts - Exclude.json | Bin 0 -> 3728 bytes ...tion-AnyApp-AnyPlatform-MFA - Exclude.json | Bin 0 -> 3796 bytes ...form-BLOCK-CountryWhitelist - Exclude.json | Bin 0 -> 3834 bytes ...-Block-LegacyAuthentication - Exclude.json | Bin 0 -> 3832 bytes ...isterOrJoin-AnyPlatform-MFA - Exclude.json | Bin 0 -> 3804 bytes ...latform-AuthenticationFlows - Exclude.json | Bin 0 -> 3830 bytes ...dRestrictions-BlockDownload - Exclude.json | Bin 0 -> 3882 bytes ...dminPortals-AnyPlatform-MFA - Exclude.json | Bin 0 -> 3810 bytes ...tion-AnyApp-AnyPlatform-MFA - Exclude.json | Bin 0 -> 3796 bytes ...AnyPlatform-SigninFrequency - Exclude.json | Bin 0 -> 3822 bytes ...tion-AnyApp-AnyPlatform-MFA - Exclude.json | Bin 0 -> 3788 bytes ...-AnyPlatform-BLOCK-HighRisk - Exclude.json | Bin 0 -> 3814 bytes ...nFrequency-UnmanagedDevices - Exclude.json | Bin 0 -> 3864 bytes ...eEnrollment-AnyPlatform-MFA - Exclude.json | Bin 0 -> 3828 bytes ...tform-BlockUnknownPlatforms - Exclude.json | Bin 0 -> 3848 bytes ...atform-CombinedRegistration - Exclude.json | Bin 0 -> 3840 bytes ...pp-Windows-CompliantorAADHJ - Exclude.json | Bin 0 -> 3814 bytes ...tion-AnyApp-AnyPlatform-MFA - Exclude.json | Bin 0 -> 3806 bytes ...form-BlockNonGuestAppAccess - Exclude.json | Bin 0 -> 3854 bytes ...AnyPlatform-SigninFrequency - Exclude.json | Bin 0 -> 3832 bytes Config/MigrationTable.json | Bin 0 -> 12060 bytes README.md | 37 ++++++++++++++++++ 42 files changed, 37 insertions(+) rename {ConditionalAccess => Config/ConditionalAccess}/CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRisk.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA205-Internals-IdentityProtection-AllApps-AnyPlatform-CombinedRegistration.json (97%) rename {ConditionalAccess => Config/ConditionalAccess}/CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess.json (100%) rename {ConditionalAccess => Config/ConditionalAccess}/CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json (100%) create mode 100644 Config/Groups/APP_Microsoft365_E5_Dev.json create mode 100644 Config/Groups/CA-BreakGlassAccounts - Exclude.json create mode 100644 Config/Groups/CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json create mode 100644 Config/Groups/CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist - Exclude.json create mode 100644 Config/Groups/CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication - Exclude.json create mode 100644 Config/Groups/CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA - Exclude.json create mode 100644 Config/Groups/CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows - Exclude.json create mode 100644 Config/Groups/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload - Exclude.json create mode 100644 Config/Groups/CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA - Exclude.json create mode 100644 Config/Groups/CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json create mode 100644 Config/Groups/CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency - Exclude.json create mode 100644 Config/Groups/CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json create mode 100644 Config/Groups/CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRisk - Exclude.json create mode 100644 Config/Groups/CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices - Exclude.json create mode 100644 Config/Groups/CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA - Exclude.json create mode 100644 Config/Groups/CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms - Exclude.json create mode 100644 Config/Groups/CA205-Internals-IdentityProtection-AllApps-AnyPlatform-CombinedRegistration - Exclude.json create mode 100644 Config/Groups/CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ - Exclude.json create mode 100644 Config/Groups/CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json create mode 100644 Config/Groups/CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess - Exclude.json create mode 100644 Config/Groups/CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency - Exclude.json create mode 100644 Config/MigrationTable.json diff --git a/ConditionalAccess/CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA.json b/Config/ConditionalAccess/CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA.json similarity index 100% rename from ConditionalAccess/CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA.json rename to Config/ConditionalAccess/CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA.json diff --git a/ConditionalAccess/CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist.json b/Config/ConditionalAccess/CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist.json similarity index 100% rename from ConditionalAccess/CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist.json rename to Config/ConditionalAccess/CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist.json diff --git a/ConditionalAccess/CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication.json b/Config/ConditionalAccess/CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication.json similarity index 100% rename from ConditionalAccess/CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication.json rename to Config/ConditionalAccess/CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication.json diff --git a/ConditionalAccess/CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA.json b/Config/ConditionalAccess/CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA.json similarity index 100% rename from ConditionalAccess/CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA.json rename to Config/ConditionalAccess/CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA.json diff --git a/ConditionalAccess/CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows.json b/Config/ConditionalAccess/CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows.json similarity index 100% rename from ConditionalAccess/CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows.json rename to Config/ConditionalAccess/CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows.json diff --git a/ConditionalAccess/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload.json b/Config/ConditionalAccess/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload.json similarity index 100% rename from ConditionalAccess/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload.json rename to Config/ConditionalAccess/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload.json diff --git a/ConditionalAccess/CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA.json b/Config/ConditionalAccess/CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA.json similarity index 100% rename from ConditionalAccess/CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA.json rename to Config/ConditionalAccess/CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA.json diff --git a/ConditionalAccess/CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA.json b/Config/ConditionalAccess/CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA.json similarity index 100% rename from ConditionalAccess/CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA.json rename to Config/ConditionalAccess/CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA.json diff --git a/ConditionalAccess/CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json b/Config/ConditionalAccess/CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json similarity index 100% rename from ConditionalAccess/CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json rename to Config/ConditionalAccess/CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json diff --git a/ConditionalAccess/CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA.json b/Config/ConditionalAccess/CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA.json similarity index 100% rename from ConditionalAccess/CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA.json rename to Config/ConditionalAccess/CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA.json diff --git a/ConditionalAccess/CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRisk.json b/Config/ConditionalAccess/CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRisk.json similarity index 100% rename from ConditionalAccess/CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRisk.json rename to Config/ConditionalAccess/CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRisk.json diff --git a/ConditionalAccess/CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices.json b/Config/ConditionalAccess/CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices.json similarity index 100% rename from ConditionalAccess/CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices.json rename to Config/ConditionalAccess/CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices.json diff --git a/ConditionalAccess/CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA.json b/Config/ConditionalAccess/CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA.json similarity index 100% rename from ConditionalAccess/CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA.json rename to Config/ConditionalAccess/CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA.json diff --git a/ConditionalAccess/CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms.json b/Config/ConditionalAccess/CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms.json similarity index 100% rename from ConditionalAccess/CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms.json rename to Config/ConditionalAccess/CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms.json diff --git a/ConditionalAccess/CA205-Internals-IdentityProtection-AllApps-AnyPlatform-CombinedRegistration.json b/Config/ConditionalAccess/CA205-Internals-IdentityProtection-AllApps-AnyPlatform-CombinedRegistration.json similarity index 97% rename from ConditionalAccess/CA205-Internals-IdentityProtection-AllApps-AnyPlatform-CombinedRegistration.json rename to Config/ConditionalAccess/CA205-Internals-IdentityProtection-AllApps-AnyPlatform-CombinedRegistration.json index 2421227703149a7088edc4a4c489584280c5cfa5..c198556c4b2fd26d53c4878c77fbbe465e0d3736 100644 GIT binary patch delta 180 zcmcbVy)1Xb4A#lpSOO+juxd=!Vdc{{VbEnTWH4X|VK8JcWUyi|X0Qa4<_vla<_ty* zmJB8gmJCJ=MhsDt6`6%6`>}CtKE&F@J^6z0yU7Kre4FnGJz$!wAYV2)fltb^l%a?r zkHLzel%bd*m7$2iilK-hl_8xWlcAWQ1S|p)Pi6qA%Va2FsAR}w$YV%j$e(;)zI5^h Y4vEPhWP>JeVCS3cARx4PhnSQ+0E(+FI{*Lx delta 86 zcmZ3MdntRv4A#j`{Bn~&u<>k8V{77`9HCS;*?>oe-H#!kA&((-@_psf$pxHJlRu~i hO%CATo2;iKu=$D51E$Fhss$(#6GR0zcZti$0{}+u9v=Vz diff --git a/ConditionalAccess/CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ.json b/Config/ConditionalAccess/CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ.json similarity index 100% rename from ConditionalAccess/CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ.json rename to Config/ConditionalAccess/CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ.json diff --git a/ConditionalAccess/CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA.json b/Config/ConditionalAccess/CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA.json similarity index 100% rename from ConditionalAccess/CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA.json rename to Config/ConditionalAccess/CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA.json diff --git a/ConditionalAccess/CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess.json b/Config/ConditionalAccess/CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess.json similarity index 100% rename from ConditionalAccess/CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess.json rename to Config/ConditionalAccess/CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess.json diff --git a/ConditionalAccess/CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json b/Config/ConditionalAccess/CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json similarity index 100% rename from ConditionalAccess/CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json rename to Config/ConditionalAccess/CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json diff --git a/Config/Groups/APP_Microsoft365_E5_Dev.json b/Config/Groups/APP_Microsoft365_E5_Dev.json new file mode 100644 index 0000000000000000000000000000000000000000..bf159c1e92a4ad8e75c7acbd7ad8505bacb90b58 GIT binary patch literal 3714 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2B?b!yV}?`)V+KnG69!8La|T^7+Z4<)VK8Gz zW=LVsWw2l{XE0+hWYA?WVX$B@U`S<1WH4bcVlZMzWH4h$VK8J+V$eaeCxs!EA%`KA zp@booA%($(ArZ_9VaR02Wk`j)AdjJxA%`IcLw7Pm4nrbCF+(v!CPNxSCPOkV9a2~pvz#$V8W2fkPHq-GX`S@0|s4&M1~XwONJx{ zU9g?042BG53w&#D#YXLncEpLjgF(DjED35>aAUiNTQ}fFXb(p1~I!k3|gm48;uj3~3A{ z;7~DTh-YwR0Ff>XsSIUUT$RdD!BD`E$xwvkQ&Q7YIs?ewQicMC5Qa*I0)|wEVt6`= z2B%!)Tms82*y&h|)SAhV$B@R5&)^JpVIo5gLq0<~1vY@}#b!$}gCjIgq%-6(Br+s{ zb65yNK0^>gK9~*5*|_o*D5iYDDJPL3ogoz*Q+W&}3_;)!DPbrA#}Opw5Hc&5A(0`I zAqO6gxa@?fb47A9q6|u70EJgELn=n7!u0up-INX1ja+spfpbY3g9Sq>g9Sq}xXc2X zi(V3e^yD%mF{CmSF%&aoFo4o_5V+hSTn^#W8vssI$>5L!l~Z{P=?uXPCEzqb*kn*i z1~LH@2cTF1rAQZsdpK74V;2OH4m&lO=R$4$S0|8#54(%RzNAYlmSvA5DI;e z3Hb~a;5sjbAqDI*P(2Mwzc9U|mZ+fe4umnwJdkhm7*ZL^@wOr;smnn&fa)VqT!Zqm z6GJLP216o4891dEG590Zgyh#5Am3rf*!_&`B2X!j4|WfzlmVrFP<@k5bCql6s#+5rkDFqZWN#NQL5+a23fJ&%LhC&8V_)t<#;Yu5>3`OAD2~^|3+(K@y zgrx&)H1@Pn1Wv7>+%$0R!*p3Wv@}m;NMcB2NM^`pa0d4$K>dq!aB2qiQBd2wsJ$m_ zAwawssP9$GfIY8ZPg}&BjZLKz*ms~9KyG8WgVP0aOBj|uU~VA3C5+8hkXS9aMGYYV D@Gj`) literal 0 HcmV?d00001 diff --git a/Config/Groups/CA-BreakGlassAccounts - Exclude.json b/Config/Groups/CA-BreakGlassAccounts - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..943a64b3bba4ab5a0de999e605d7a3a1d4be299a GIT binary patch literal 3728 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2B?e=LG=?;WLIoLlT22LlT1#gD!&+gE@mSgCRo_g9U>bLo$OYgDHa{LmGn;gASTKDGaF$ zISi=`B@C$yDGV+QiC|U;LncEmLn_<_c?_itISe@%x|11l7!nzZ8HyP)8PXUs8Ir;J zGa2$3@`%t|#E=SBkI!Z$1|tRo1|tR&23-aN2177u#1O(@z+lc`#bCf-%wWY}$Y8_} zg~e~l49GS(F;p@*G88ZrFnFSbtvQ1UgBgPjgE4~{gD!(1g9$?_LozsQ%@~Xs z3>b775*bn$EE$r(VQa>a%3#P~#$W&rc@UY*V1~v1e1;;1bcRHRJcdk$DzHx>A%kka zDuX{Bb*fm*1;tr01ITxo3@)?}L zE=**|VaR7lr@#h~z1VCiW^jb&k#vSUhD3%WaE=RM$Y%&*$Op3t#T_W-e8DLxks+NS z6&!P*xCjD=NC`s`IPXF7Fd?&Y84?*X8FJv^h%3Fo)VU(L8Br#IN~0WxVunST91YClqf=dHPxetmXLg@~h z>w>|h5Ni2?UNVsqg27<-m4fp_2}30n-3f^i?0Er~3k$$yX&N{MgK8pJ{hG+&!;nu> zU5RNDD6N1}ZYcw#L?9IUAQSQ#D!_GM3PTFmWuUShlzw4)Ni9)9*%^ctr%QofD%J6xE%#*OM%*> zpmv)fxXotFV9a0vZpoQ}+p(ZFmkGEv1!{X)Fo4*);JN|SDzjiPWiVneW&pKrK`c`S zGX_g=i_n6>0!y7y!jJ*29bsu2SKb7r6HvS)f$PFd22g21NDrv}lgUuX016#SN-10^ z!%q literal 0 HcmV?d00001 diff --git a/Config/Groups/CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json b/Config/Groups/CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..38ea81947bb3708b6a57ab713c6a3b92f8c85346 GIT binary patch literal 3796 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2C5A+X6b3_vWQIhBLNExe1``HT1|xN*GcZQW#tq62YtxhD?TBhE%u<@)$}Pau{+jbSE?9FeEY*GZZsqGNdtNf?Zg` zkjaqGkVk~xB8F6`eYkB_VlZMbU@&4ZVbEnT0Q(KZ3t=!|uwbxaFkvtQlNJn7Sp1gE zfNX;kLnVVFLjgkpgC|PZnuAR-1&16YL=72C7*ZLM!C`C0V9a2^pbL%xONJx{T?Qit zGjRBtF&HqUF@VB2jUk!A42%8w3`Gp-42cYR44Dj7V4p%l2GxF527f&2RI!)~inC${ zknb`X3K)nD?-YhihGK>SaEw(l_%S4+#IO>BGlL_80T}8sxHIH1Pyr92pcC zbQu&FTp21DKq;t{0pughw3*6K!BD`E$xwt8cBH1zbg)}X844Ie7%CYG7*ZLE;VCm3 zoEMPu9W4K0r(-eFeuzE6)!G|HAq}mqKBv4ubrQA{mNQpow^g$-%GgN@f z_!Nc|u**O-KPdge^paYlg33D(#w_zdzRhDuWhlqnE}^7#0J5PNoMws`KzZ4TA(bJ6 zA(5dBoYIRJ{E_Nb^6Lzc@33R+enxf?sFcVDy9ZRtfKorGzDcLK%V6%sbRnp;PG&&l z4(zEJRGXAyDc8|;kinEem%$v|A~s+EwfR78N)s%ts}hC`X#EIF)wpse zD5Zd6CJ9^{W-@@v3qpE8B~&IuAp#D^E#l3_rcw#)J5UTDw=vwo=>oYW4D&0@4aB#EvDpd|s|B~HAtV6uHuvuU literal 0 HcmV?d00001 diff --git a/Config/Groups/CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist - Exclude.json b/Config/Groups/CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..2496b976e6a10a33a117ae28d0b9e61d6dc9a230 GIT binary patch literal 3834 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2C5BXnWCn8vGX@KWLEgE@mCLlQ$GLlT2Ig9(EYgASTKDGaF$ zISi=`B@C$yDGV+QiC|U;LncEmLn_<_c?_itISe@%x|11l7!nzZ8HyP)8PXUs8Ir;J zGa2$3@`%t|#E=SBkI!Z$1|tRo1|tR|23-aN21_t$&Je<2$Y8=?#bC%_3?|JOqOkZa znE}}bCx%J}M}`810tQc%umzcv!eGH*#E=ROXI-$3Cg5;1VMt~$Vn}1q1&3cMg9QUf z){?;t9I^%sDd3PbV=xDY6?)j_GZZnTGbA$PF=R4Sfqe=I8C3gK8T|36Q^n#hP@EMr zfP9z9P{2^a05KJoT5!cx3PUDCF+%}3#wr>77!pxpSc$=z!I8m$!2q1P+!=Bh^14dVrXZ7pF)V*rIo zE`u(E6N3+fKZ7%aH-j#NGebT@DMKDZ2}2P>B||tv216z|73P3lT*9Ehpv$1Z;L1?J z07`GA3?TnwrsPzH3WfrPOok$)kR~-fr!y3R-BQ31!cfUjz>vyN3{S_=;GBb;OJTVc zI~|LWTQV8)z#-rac3~nojMFKw0c0;WTZ$PRp?NZ$ArG8FK{-5xA)g_LAs?LE38fWK zO7R7!+(d?ShE#A$0mTm}zKg-}1j_4>GJ}v=xeSR6nG8AbaKx29Vd`9w+>9s#K`AbW zp_m~RBUEAf{J`Z;Hdr@u*`>tb#sCUykY3DG15%mGki?M6P{dFSPI(0kLEzGkaOsCn zZvZ$YC4*BCsC3L@NM{HJ=OR$35ehR<`3W)s6!M_B0Hs40hI|HyU-K|>FRn1fW{wZI z#4ce7W~gMyV@M{s%*SS?AGii_0+&R^6uHiyA&DUiTn?9j%jr~bxd5qMKygG)$OVJT zI!A_NhGcN=2Bl>5@{g1d3jdN;Q0oAceqnk^Ek{A690+5UbRg67 z7*ZL^!L<;svYwI_1jvSBaGEJ%0Oe&ThE#?OhD3%ka7r&?@JFhD$*(CuzQc~O`x)6q zpi&|q>>f}l1InAAS|*+5E`zxj(}kdNHW}PXfaDJBsTow)mtrZ+(RG8`O1R1ZC5B)I zU2uEF5ZpclwTq1zK&>-StJjjjkim?>kO9;(HUzg9jTk_(M&Q;lM6DTv34j2X-s3>eHAK;~f98zl@G(0UP;u5sm0P+9@SO%k{kgoFtpJ)qW5 zCPN_uD1;~}sc@wZSB4^R{RFD>U~VBdU&2xXHX3{CC<3QfP<|RX_hGuMoS_KX?gaIh zKy6)6yA;%7%VbCgr)N;#2(_(^+H1oW0>q1f`h3L<*mDc^v_-tx*i|E26Ki~1`7sV1|tSb z1~Z04aEPXW?-YhihGK>SaEw(l_%S4+#IO>BGlL_80fPZJq}>^E81fmC7!nzB7<9qmmCBF@ zwyA`nk|BVhh#?=GPLjc5pxD-BaAe4XhcJv60Jg1!A&mhP7P$<%3{GH^lNquZbQydY zQo-Sq4Axi5P{NSG0J8@EVp8(V=;0|CPN-LB%Hx61chxrLplXEfb7L) zOEH5ZG*6~8aLk>I~aoGt|=ZfTJL>ZU{PK(71sTiRO)8_|vQ#M#Pa@nQC;0D)= znQA~Pa~YBtQW=UEiWxE(KshQ1T-p&X{qX69c!5gCJce|JV1^QK%o8>ll%qf< zfI=P=7oc?L!jR7Z@oOGN?!^_R*v#<(m)Io?!3>oQc?`)Um-*Pt^aIx*PT-QLm?GEt zGbAx&fy?0%lyV1DyMW?|P-?^Gx?pfw=g5%Ekj#+JPzo-|(91tkLNFNYzEW^50F{TJ z@*GxfQRYraj9||JxLjBOuI19eDHv4W!D{hD1|Noel4@j3lR#+&lyXZMAmsp|&y@@*bNDnmKmwhJXK2#^iM;51Xj0Lsfw z457&Cy_rdV2Fkd_Ll{D-A# zT)7jJQa~}21g--!89?O)Aw8fHDwCm*0Te!zlvB9UhATr6xSa#4@nCKtH&?>a0X7Hd{erwcvI%gaiON*GcZQW#tq62YtxhD?TBhE%u<@)$}Pau{+jbSE?9FeEY*GZZsqGNdtNG9-ib zXENk7gGP{feVkjRk7kjYR5_9-M}Q0-S` z@W-Q06^p+>aaPO#@?9oF0YeD`#8g;n!4+3244DkY3Pyr92pcCbQu&FTp21DKq;w|0pv5xa7<;W zU?^b7WGF%kLsC;}I@s-{31sSS)5JVJHIUVo*#X${$=QDwiRVA(J5o9*%_6xgxn4VLGT3%V8*HNW}VVTfz{` zP|1+TkW6y9j?GLza4q2kE^Ue_a-Baz5$LT3&1s58aM@m>NHqQoyg$B zkWW&ri)j)lt$QA%h{2p$weTLG>A;jwQd&0Qn9(#_nfi7lBHN ze6V{!r3@(bgX)`f27jd5pB65Ixfj!gpwc>-0g*efr)E%XQi`QqN7oH%58)~Ulo*1+ zEizE6%m~gh2e)p`!0lpF1`veEn=n{17&4eLm@pVHm@q)pn=x207&DkNSc0JmxP@l{ zZcl?+#-LWR8G|8~TBC#^16n`AQZ=sJ2}&uTm`MWHhM5eY@`8{aPzjaEP{;rZA4WjhHM6Ba8Cu) zb4drMW>D`3wKa{}FT)lB#EXG?b;S(W^9uH~MZDSAR4Rde2Z{mYHikPmT_CrFVd(?r S2I5=7*lY!f)q-2p5E1}n2>C|< literal 0 HcmV?d00001 diff --git a/Config/Groups/CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows - Exclude.json b/Config/Groups/CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..be17377bf0d8dbbcd520a851e56d49702ad139cc GIT binary patch literal 3830 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2B?fZ_bB08QL0 z0pz<(h608X28gM!)PgInQW!EBiWv&PF;>ao$B>8;!%7U!42}#238vxWL7RiB10xa4m=!jrAU}MS0pzhO1(62>MLeQ#RyfHK0mOVvcbBMODiRYB!*-L z69yx2*^$JM%Am`Tge4z=^yD&tpYB{iz{@ond1X4txFh!87dj_7?MdY@3EQb z2d+Jwz@<;!$l$|}Pf~4+X%Z-{ zfKqNL1EfSClwpx76tK%cEdx;ch3O@=Lj7j#F*wZ>F@W;26GJLP216o4891dEG590Zz2w&!Am3rf*!_&`B2X!j4|WfzlmVrF zP<@k5bC&BP2lo*1+Ej3U}*a*r3wG<5)%o)rW z%oxlWOc@Lr%)v4S3>FLq45r{#9;mGh5;bNpVK4``r$KFILk0_Qy9d;|HUzh)K`m`i ztJ4@uy#Z;zfNB6(y2h11L1_gPH%Z|7Fp~jPVi3{;Dx)$P3K>8lL`g}7D|NUs6oK13 zpgIrc7IO0?EG1y0v8RqAaC!yhr-5@HrpwBq<#{T&&6~`S&EO2~!+=WkbZ~kG^@~v3 z*{D4>Y#~6r7^uHj%z!<&U{71bn~hDS64-a37(i}ixP#LLa$6XdK45MjzAcQ+R*+aN IxJ?Zq0eOl3_W%F@ literal 0 HcmV?d00001 diff --git a/Config/Groups/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload - Exclude.json b/Config/Groups/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..fd15493c17d7bc7a4a532c64c1745db46179a5b0 GIT binary patch literal 3882 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2C59vhLxwa4Lk3HRM21ub3kF>VV}=w4ONKNC zT?P||B!*;$6b4-e3kDMgLxxlaT?R{rBnAV9GzJp}bB0s~BZfo7*ZKZ7*ZKh7+e?r#tdd) z(vTqvi{FwNkZo{csAOYz49VcIHDfSl zFksMSNCby>64-t-hExVa1~YI7r-8|21~V-7=Q9*Bq%$NkXO0YK@6!3#SA43Mc`Bg^J6iC zE`t-;ZOIJT3@!}$4CM@YU_K~*6c}_F6c}6?Di}cNvXlW7PM9e^m7#*6fFYBi2q{KL zP50^GkSJv+UmC=T)&(iw{3If_&p zK=xv@rI^7Hns?I~@)!~slE5WF2tz(Y5JNtg4f7MOGzCggzDV&2Dl_sJN*K^%50t|R znFUH0nG88_U*fV8rVf;1U~Wc~m1*EKTg;G(5vnkKe&7_94fZj}y)btvF_<%$GMItO zQUiu0a9NXxCHH~!kxy4V;2OH6*OwPh{|6$S0`|$219)RzNAY zlmSx06AFEh3Hb~a;JP`5AqDI*Q2Ga@UzlEU$~)|39>}+O45fby~vLn=cCLn1>NIHeac_#@TWl$GcpA7Wz6avt49pi&|q>>g074U{)Q^-Vg> zT?TV2rVBx(but4YcVJJ=pte9MmU10kH>h=ms|-+L2nM(BKy5rDD9eb!lEH$(l);3- zfWeT#fWZvh)-(jSGYuI)twTewJg8k`#9+n%;(^+upcW{^3{$XfkXj1{Plz3 z3%R)xmJYDd*waQ4IJJUu)4;h8(`Dt*(mWO1P6o9{ox%McP(LUgoSH#>Db%((YA+94 z2oNs@>LV62V9zVq(+TlrV^gUF_8lk&KZwX_w6(m** IZc#%>0FRLf#{d8T literal 0 HcmV?d00001 diff --git a/Config/Groups/CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA - Exclude.json b/Config/Groups/CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..389d83d9fcb92213bee091579df0b69a10e44340 GIT binary patch literal 3810 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2B?e=LB!(1*G=@|LBZedfBL-atV+I2TO9pcW zT?P}dxCMhQSjLh8#Ij^aW-wzgWk_Z)VK8P$V@P30WiVw(WKd$zL9+)Wlf#h8P{NSP zkiy`?kO*dlFk~|1GNi&?kjGHUki(FJp*xu&har)nn4y>j3NMuN1uw+PL&}A@U zFk?t%Fk~=eFknbyNCT6g(8dhge1;;1bcRHRJcdk$DzHx>A%kkaDuX{Bb*fnW1&Xs` z29WPE844Im7$By?QVXuQN@2)kC}t=C$5GdMCBG8ixzFz7NkGNdr% zGGsF3F%&cCg2OA7ArEX*2}31A07DT&J~*8ugT+9xjjSht0p#-%hD3%Ouzp8|Jg_cM zS}9>j1Iy+z=rZ^+xG^{~C@|_U*=^BK}9umNN*Hd~4r z9HBWbogt4Qks*lzlz&4Q@)?2{^1*CEDFKuYe8K55ks+NS6`T%0u^R*qkrIX?a88Dl z2!zbaWk_VmWXOSsBd*j3Q|F50W<&{>22Cre7@-Q&=LdFEHdr@u$pk7JO~55U8bcC; zIfF5SE`vFiJOk2`%aFv7%232m%#gtV$~i&cQjKsahfgmgFC>FQ4pa)}F{CpDGl0@Q zDEtV89w_I4OaR3JC{{oz(uE28S)uQ!6g=YIY&we27}#K z3eFFpat~B)!^%O*+zE*h?0Er~3k$%t8K@0V1ZKf%>qG`0hJ2E0UQClfX$6#WOBo;~ z0-?|cnUK#=0j^O~7*fFQ0kr}^=@+J#)Djg`-hnV?nFp%H^B7VY%JH^QC}}BxY$yh& znIZ;IUUp(gWyoMiWGDlt^dbg-q=?VBkzE8TCGx@U0hKbKya}pr(rNB8 zn0ql@Sd5lCu%~8FZBojBS+1k&#+SF07=ppAGEmD5)b<6n0wFCG69!WTBL)j_8x7KO zGiEShFkmnPx6dpXOc_kUI?Wjj7)%(G(-04nW4eIV2}HEQn+;cs$SpuSx( r1NPj4J#CR=3qp?)*ms~9KyGEYW3+|Q(<N*GcZQW#tq62YtxhD?TBhE%u<@)$}Pau{+jbSE?9FeEY*GZZsqGNdtNG9-ib zXENk7)aNCU@A8bdOJ85aBV8HyOv84?-t7%~~Ez&?e9466OA4E}i3sbVn~ z6lcW@Am3#&6fl%9Kum?D7F=O%uoQ1u}TI%hD4MYR$_2waAYuqhOr|<3PUbK zCPN-WF@r8RyiytRz&4dIR5AoG6fxw3(@8Q|3>4eC42}$W@DPUa0>HMFFr+bn!XlSJ zm%*38jlq#YfkBr+fx(rbf&r9*N*O>t!c3c~3>6Fo44Di?NMT263QY&QwUnWNA%vll zp@1Qkp%|VrqrrIrIp4wZA9gwxBmILy2;?_sunQ9zav1U%(kZY3WG^;biWwZCxh$O_ zk0FsE37ls`81fl{81lhvLa`5udtY!`Ok_xBNCn3|C`N<8AyUFn1kSyXQh<9vI(ilMDRm_lz5vnkKeqc9cgLNa9MoJ7x494K{%#tCM!I&Wh zoKrE=4@gfgLlQ$OLlHwULk0sVw*-MpGQuSrKE06ip9~H;P|26akj@ayPy$W^giQwJ z7LW;`H~_^8C`Gz3z_o)DxRfcT z$aVe*HvY{B9W{Ma< zdD)2}l_7&6k)aHn(u)}Uk?L0R>kN?Zuw(3gMs^XXl*k9W2UN;{Qa`A^NvFBXVD80q zA*i%YWlz33%R)xmJYDd*waQ4 zIJJUu)4;h8(`Dt*(ma(Ri6N08nIW6O8QenwmFMZ;)C}tNpthn>`(xNbfOs)bZ?2dD vdtSkwwum+$D>Xai@BgUD`o)sE|Z~v zp@acqDlE0&imMccOon2H0&t8~GWanhqQtNggENC8gCRJqbr~EPQW$a>G8yt1iWzjl z;g!me2ezq%p^_nhp@<eq>NC<;;IWpvd)q+w;2}2qKC^T{zbQyvf zG8xjrVUow-29BXZhEfKQ`N<5G36HZv{lLg@+)S{rZQA86fk5m6d{Ew zscAPI?2A%{0)`NVN`?Z4REA=BnvDkM6672S%bD2eSd5$j3OkUWoxv_lWXNI2XGo{O z29UkjY$;}Ngyug`m?knLfpc>RLq0IC|!V3g)cajCNiWmq=HigD6WIRAyUFn z1kTrx@_~?9xeSR6nG8AbaKx1sVd`8N@)%%lMwEAH4508TW=O>dRhT|Mu$!{Mx{=E% zB?b$IB!)x=BL-0ZOk*%*(8ZcFL3(l-k{D7MiWrI+G8jPlC4oHsWN^rV z%EUZ|bcSGt5^x$IY%(YxflL6!0Vq~LDbj@@p8?|QJd8YxD|E4$;{z_IOBjL~DjD(^ zl1VP(){ zpQL&i((>;96tK%cZ30mGh3O@=LF@W;26GJLP216o4891dEG590Zy5!dxAm3rf*!_&`B2X!j z4|WfzlmVrFP<@k5bCFL)45kbw4CdfABSaq5dNTmG)j)C<;FdF}9c|8F25wcFGnj+LKrKLH21~FR z1`Os5##q{2B@7wR`Vp3@apg`>N&&@861XHg!F()s7wY(TZoc!3Rl{2Wher- zctABC%q`^RN?1C;Mq^JKMc~v5%1s03K1`RDLre2iaH}DiA)CP&+;;($=jq_o4C)V| zwy#lpYS==6crj2vub2UQUcsKWh&LOXN+q!GKrw*a#&8Fx3*?qCEPcS-KzvIWo2?+R KT5yXRLIMDh%Kb0^ literal 0 HcmV?d00001 diff --git a/Config/Groups/CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json b/Config/Groups/CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..49ebddca26473c8a7195bb7b641c43dc3988eae0 GIT binary patch literal 3788 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2B?cn~6NWT~GzKFEO9nFr0|s3N0|pBQGX@g| zT?P{dbB0ug6b4;}M1~XwBZgE4U4|3}Lk0r|6NV%PV+K7*ZKZz-G8GB!XEX44DkM45@GzouThGYg^1|w+Lfx8HyPSz%f?I;Kz`N62nRi&J2!VpMz4DCqo`M9TYL-F(fkN zFcdTBf|fFXpTlA(Yh zm7y4(KBK`o0y+1=av^p)79$sAGUS2%<_vZrD7^9+(kZY3WG^;biWwZCc`Y3rFG=8> z8^Vy!5X6uVW)n&SpcLQ>PLYWW=?tmh6ab3pAaID3Fcg9FFr+LXWL7RiB10xa4m=!j zg*{B2E0UWLWm_6FeWhZADomdr*iG4B-NQVF+fZWXNMkW*{|>U^CMXTr)U>f}l14{j%S|*+5E`zxj(}l%oxdVG@2Gt>@449=kx^8@V zONk+vL6^Z0j6v-_5X%hQHUYJ{Agwb{OUw`~25Nm7GMF)#GJr^31`BZ8*pR`T!Ggh< z!5rLTGiNYmFlR7fFoB90Vrf;CFl0b$L|BT(l`}!91QaVt;Q9~J8X}|zR61oc6f%Iq zhLSQ0SGsUzC<3=}K(!srE#&4%SQ@}aV^0@F;FJo=NdxCTOqZ2IOY&53?*WCmRZ69x+g69!{2 zE0H0UA(cUwA&DV{A(_FPL6^ad!Ggh(A%($^A%($$!Hgl9A%(%1!GJ-DK?lvA6oyoW z9EMbe60jXE42fV?2ty`AE<-BZ1$hjm3^@!r7`l@gau^aBiW!O-G8xhsG8vM=`ZF2w z8S;qGTf~qGRuA$WE}NAYj2H|Uj2Mgu2iWt%v5*hLsG8wACK81t~s{N`A{&>`>V(}L! z&Wag8zRP4NU?^dLmA(Nq)p#U6Xl?;9ii6}9w#Nf=}2o7sQ23-bEhCFaO zC}PNCNMy)iC;;KuGL$e>G6XObG30|)CBxmI%ize62M=c$F92+32}2qKC`57@ zbQzo&d>H&0oEf|sbQwGtG8xhtG8lru?#pISV9;eyU~pxqU;w4AQU;K%m|>gBP{B~Z zkjYSl6t1|^5UvnO2m7Fup@1QTp^~A1A(f#Ro@%4P`2;yn!ty3|Iu;{uWHRJ|ee4W& zAt)5{8PX}R0c0;WTZ$PRp*b)e99v1?{2aoN&k)3r4`vfe8K89G3r?qr4CxH1;B*0s z=OA#1lrR*5b2g-eAY@i9Ln1>aLk>I~afLlhohy=?5hY$4G}WbIgepv*AJ|RVVBN?i zl@fy+TrXy-0jbPoNMcB3C}JpP$Y22FpCEAAM!2lQrx%hJlEL8xDhu-%(iwsoO29Es z*kn*?2{Hi`@}Rf?r9&5ndO1Y&B zkaB=f=z~niXQ%*|_bCi1V3&c~0-*E@(@SbO3M%D57_+1U`8JOsm7yGOONEm50?3A9 zaGEJ%0Oe&ThE#?OhD3%ka7r&?@JFg`$*(CuzQc~O`x)6qpi&|q>>f}l14{j%S|*+5 zE`zxj(}l%oxdVG@2Gt>@449=kx^8@VONk+vL6-s4IsvtVAuMACO9l%DQwDQzd(aHr zegVlCLB&9AUIPYGur4D8GX@g|0|pCl+t?gT>M~d`7&2Hem@}9&m@=4xd6>0E2}1_7 zR)nQ$T)7jJQa~}21g--i?Ic2aKqXWrLm>kwd?+cWaHS1bh9Yn~2UO$1+(K@ygrx&) zH1@Pn1Wv7>+%$0R!*p3Wv@}m;NMcB2NM^`pa0d5TKz*2W22fcK>Ib2=t5JJs*g}AK zF;M@mm;rlU!Jf8=HyfKuC9v;6F@W60a0jOgla61}80suA; B{jLB2 literal 0 HcmV?d00001 diff --git a/Config/Groups/CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices - Exclude.json b/Config/Groups/CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..5c588d51d17849d62ab763ac5d82b010618cfa82 GIT binary patch literal 3864 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2C5AKx69!`jONJx{O9pcWLk3+iJCVVNL6^aV zA%!80A(=s!A(6qH!IUA9L6^aZA&J3^!Ggh%A(0`4!JNUE!JNT>A&o(aK?lvA6oyoW z9EMbe5{6WU6b2WDL@+CaA(J7OAr7LPz)-;8i4wNv3?>X_45r}FGG;Ji&}A@WFkwgqhbTzKn85%XwkhB+ z2ZgN}Ln?zIgBdtP)4*ghgBce4^BIa5(isvN@)$B1s=z*lgbb?vsto>k)Tv@I7Zhj3 z3?ScSG88bBFhER&r50RqmBNt8P|Q#OjSu&}DE0rxQpxgLH*6WHRJ2q%h<&lrt1F z_%b9iBs2Ik1T*L|1T$nZq=UmIkHHNbQ-utr45;LuBCNQb7* zRE9EeDobT3W>8?zWl&&nWvE~PrNUAMkn1qhcPc{#Ljgl3LlIK=lbXuY!9FczC}0R- zsAMQ$0ND-;?Pzd*Le9IeJdB-=#mGaT@JVCHXK)6)5ER<^4CxHT@ccun4Iq25*;35l z2+gUWP)}q?0_Xb>hJ1z~hI}v^<|kY!2$X(6F$hW%pcny_5TNuB1P+lBh9Yp>KuQuq zW`SZhlOYH0OI&us)VYFFBE-#zk}(aMI#V%16{gP*?51q6ZjgIn?gEvmpxkcBkjP*N zE?;#SEU@G?ke*zIB!*OmB8Fmy3@%^V+aiC)4G%uor=i=^fjY-aj_YZxbR zNmYzd_K@N_e}*K6EO6;u0xrivR=6Q?kwfL#V^J%G|LOfNa*9riL0?8Z7_*#5cM+(R$OpRzRLX$zCa8Q!XP~vq zU~a{9VKG|nz@C~xwF#&-fZkq3*Nrc4DS_J=pw_Y>xTOqYf!d0oHna(Y5x7-s#9#?- z@qt=-7T}ho0fQ;HMF?sKg4%}W3})aqH>lkWQftIu%3#W1%wWi1&S1`9fwkpV!jQoL zDw_$HHpC}xrvK(!&HWd+L#xN?IVY3;W!Mz+%y_3!WD(gX|3u;RowNHmF1c(;{ z^$3d@u;&%*>4bQ*v8hx7`wkQXpmYps`GLx4cW}BuZVAKE2h0t`w}i3T3KFXYx2Pc` E0Jg{lq5uE@ literal 0 HcmV?d00001 diff --git a/Config/Groups/CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA - Exclude.json b/Config/Groups/CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..1220f8c84b45f29802c0d1f1694b85629f07b73f GIT binary patch literal 3828 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2B?cofOlC-BNM=Z3NMz7uuw*b~uwbxY&}A@T zNMkT$Fl5kWNMbNxFk&!g&}B$tNMkT&Fknb#FknbyFknbxuw+PNNMlf9&_S~&g&~z8 zhar`rgdvq7g~5d(5zGo<$YjW6NQJu~kD-(yham?;cQQi`Ln1>lLoq`pLmERSLo!%@ zCPO|$9uazr7*fIN@!1UWJIGfi47v;kU|)iGAq)l#77SKkKY~ajhA1q4OJ+c}!HJ=g z!I7bWp@6{?C2Y+ZOc=}l0W%oubT3>i$oAq@&!Gq4@H42cXW43-Q@47v

k)Tv@I7Zhj3 z3?ScSG88bBFhER&r50RqmBNt8P|Q#OjoWL);~pea%#hEJ#!vz^p_CzyA(g?EArGtz zl!8F13S>6OygY_Vh5)d8N*K}@K%te(05Z#s!I43ML6<>+!Ihzc0hGo{89;uNB zim4!Qh?FoCf#VobP7pFHmm!fMlOYElj=0h!OdTkNBr-tUj41cgplL4^BUEAf{J?I? z2KyM4vS98~VlZI<XG(7(n?c2wc_?F8lE5 zh2#=Yc?~HW^BB?@f*DG{X@IcFpwbg$0w@kZu>wkwE)4k$5MSqEeT-=mD6N1}ZYcw#L?9IUAQSQ#D!}z@3PTFmWuWvAO206@q?V|l@(zSC z%RG>8LA6Uc-j)j`?FWzzp!y6H*Py)Y#E{C6!H~#M22SZk4E{*9FZp!_$amN=c0VJ# z2vkbsgWUsafr0WSsJ=<3xyxYg#dKjYTJFG}nnATmDFbG?j;7$D-t;5M5ngDJRW2jb~6Sb$s9ptdB41!_%#T6UHUCg66U zC4&WnDT5`05tcfmgdqc3JHpa5uDl6KC!lyq0@sC^44~42kRDL^l*v%Y016%SHX1H_ zK=BSr3CQ&Yh>tC0xH1%h+dH884(1ke^CT=4V5708j3RJa1?8oIb04P5%AsX>Dnk-O zB11AmHiI*`2LtNSq%(kWKd4uP+R8@luVD)T;>AF{y<%`H8M6(9J|hD3&9hGK?HhBSsuhGek* zOon`hJR0|toCjTk~03>YjJtQd?L3>mB#Oc{(AqOkZa znE}}bCx%J}M}`810tQc%ur+5e0f(vugCT=4gBgP^gCRJ~lEGnX1`c~&hD3%G21|w{ z23-at1~Z0K215oj1_OpPhBPpl%wUGa{(OcahIEERhCGH$hAOa6At8fmzbb=29(Af% z%mu|+F$2hVnG6LCB@7T#VW|aIT%|B%G88iufMcwZ!H*#kC5Dw4oEaR!VGT-2o(y^5 zbWp^Q$B@X7!%)ni%izdR!cfAH$dJsC%@E8`%233R2Ii$Q1cB2|DMK>cEg;pP^a2TQ zi0(XwN`?Ti?IjFp44|;dWzc1CV#s002b&qnkjIeCkjIeEP|lEtp|Y4kfkBr+fx(rb zf&rB3N*O?*fSI0C87deG7%~}(kiwhPRGrRH#E{QW%22=%!cfUjz>vyN3{TC`;QWJ} zS7CV;I~|LWXEGV`!2WjzyATw*`3&h4*Z{H@n=Qo*j?kQ$4vxhna6S)V$Y%&*$Op3t zr5I3p@dc;fM22*RRB(C$r3+Ae7c-PF6oGR*q~suERxU##LncEGJREVQQkXhdBsU{U zLQskWrN&f@P=)F91G@>7j?mM05VLyo4c`p^_nwA(`Yl0GpY9;2OmVTrw3?DmPQX zB@?8!0mTtHAr}lT`y3gP8Ir;I9F(Tf%R^E^Fc|DUP>GnyP{L3Nu3xC*PDqSk&kML* zSOBi|(!ePgRR6(h^+X0Aa7hcQ;fbp;Fiirb6;R48Wq_0jghC%=LOw$UxaLh^NCCSH zl>R~K7p9lg5*1Y5fiPy72l8zmLn=c#xIV&F>QmC90NGFsPBTT|7M2r3DnkZCB10KC zr57>yBh|;`*BKz+VaM40jO-#%DUlC$52#HB%A272CY|OkgSi*eg~e#O1AA%))h4A3 znB_XUZhU2c5<@V!^#*Fe89`Z~R-GY(C4(7*1-Q)!YC(eP0FVes%!0v;!IHt8K^NSb zHe@gbw*rm8tv+LLYY)`A2DK4E?QCNPbF8&S2}1_7euSlJT)7jJQa~}21g;Gs^ls_|fMAvagT(g8Lad)g=hr&dtSIB@R6bXhsLbpxuK zK|Lo>o7WlKs{!?L(!s4?%yJa94~H!Th!+F(0E-#0=N0T}i+HoKsZ;{{4ip2(Z47sC ax!TK{9 z@)`1o&|Aci3RaKLW+etA1_K5o1``Hd1_K5|Flo#X!eGE)&S1r0z+lE;1rC!aEPhL7 zK(@h&p_0Lop@5-)!4oBH%^6G>%ot1=EEo(Kj2X-rbQui6VVVpMTTmz(Fz7NQGNdqA zG9)qRG8i$KF{CmWGMF(KFr+c0fyrbBGc5M!GZZnTGbA$PF=R4Sfqe=I8C3gK8T|36 zQ^jH~D9(x*K)%alC}1dIfS3wPEx6(;g&~unn4th1W0eek42dW)ti<5V;0O+DQwCiI zPlh~jIw)euV@PDkVJHTRf$Rl|XEKy9R5AoG6fxw3RVBmSpv&M0PA8CX2I+ES$OEed zrIQkdGzL(Z(sX zpCI2mgZ%~y(|m?>3Tyz`i_Ml|21jUqOb5qZ5;%8~ONF4);BSPs8o9lwX zC7vTgGD9*$K0_(kMD$XSln@LCyRVd?hyhX_QqP@`7{Q(waJjGmT-T*BfI%r>s zL}iX5v$3gE0{7KGF@W64a0jOglaGM%J0s!x%0K)(P literal 0 HcmV?d00001 diff --git a/Config/Groups/CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ - Exclude.json b/Config/Groups/CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..31bb2c807101b0005c1e1049c5330404c9c84f58 GIT binary patch literal 3814 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2B?c3QG=@}$REA^*6NXdELlQ$Og9$?-gAs!ggASTKDGaF$ zISi=`B@C$yDGV+QiC|U;LncEmLn_<_c?_itISe@%x|11l7!nzZ8HyP)8PXUs8Ir;J zGa2$3@`%t|#E=SBkI!Z$1|tRo1|tSz23;_%%V5Z0$`Ha}z+lc`#bCr>#9+l>z+k`- zg~e~l49GS(F;p@*G88ZrFnFSbtvQ1UgBgPjgE4~{1IPwYC?|u%){McJ!GJ-R zA(0`4!IB|~L6^aZ!Hgl5!H~g>!GIx+Aq`9>GniqqKcAt9A)O(SA&()Gp$hC%NXVet zugc($N1ZAbb3t)d%mDITCPM*32?NAbSZcu)S1Amc48;ru;25i9@MB0siD4xMX9h=b zSc5{qlOYeB4vHA^7!nzB7>XHm8Jxf|oyrivP{fcAmQ9A+t;^uZkOvQ6U50RmOolv$ z6o!0;aQh?!PX z87deG7%~}(kiwGG6q^oqeJMi$LkL49Ljgl7Loqz1MuYPPaz2FRN9=SgMt%VKI*lQp z!5QpAP{`#oq*Gu6$X;x=6f-zNb6q+(hLXT}ID{deA&4O#%qEl?Kxx4j92bcU=?tmh zv;d0pAaID3Fcg7vGo(}?WL7RiB10xa4m=!jr9hZES0pzhO1U&>N=wBERhT|Mu$!{M zx{*sKC599R69yw_9tF{${EC@=Kzee)rC||6F+&CeDE9<`OE$tK9X`E~9FYtTIZ#QM z$B@nt%uoVO1B6Wmm6ae9Kyd(y6;O(F0p}M`sODkhR9vBp%^V+ao-JVrW~gMyV@M{s ze8*;{AGo$~0+%|)6uHiyA&DUiT&tCU%j8sWsROA=QW=T}rYCH!3kH{Kjtt2R$qe}n zrC<}$%Q{j*Fc|EC1GNQ;z${peoyg$BkWW(Wi)j)l zt$Q z^@Hl0beg*i=3Yz}7Ng}3?5P=4o0KwOmh0%cLG2=3Wq=YxFt}v~YMmLuS;h<|42BE_ z3?>W~3aok!JNT@!I;5kwgeWPgaHS4c z22fc6YH!gZ)xy$-0t5EcQ3Ot}p!_s&?!$ChIkY@aWk_O3WJqSnW&pKN^T2(WbOumq z59$Y@wyRNlXb69k!vgj1iW#uy7VK$@99s~2l)ybQPz)fqGTbrR!suz0__i>@E>u=6 IxJ?Zq0TDg>$p8QV literal 0 HcmV?d00001 diff --git a/Config/Groups/CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json b/Config/Groups/CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..96ed5a6f5a56e8af8965c405e489c685d0193c79 GIT binary patch literal 3806 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2C59A+B!*-LLxwblBnDFkBL-bCnap6ypvz#w zV9a2^kjS9RV8M{ekiuXAW|=UUF_;G5;Cavt1|fGQKyQ< zTu_`9Gk|=T$xy&RY^oTgiU#Ki4CxHT@H{}O z4Iq25*;35l2+eKj40#NR3`yX;8^Vy!5X6uVX2bl1D;z*+z!#h*6B*JOQo(5e6r(}l z5Gi3O0_S2#X+X%VT!uu3Ookk|FLBukQ|F50W<=?h#sCU0P%1+&n_&9qah> zlo%`-48WzHAwv>F8n|3E$C6(_dU6?(py@b+0hDWkz$F@}M8sdh;nNFA|HGgLC;TKFEZ8h6->QpTdv=b{VJz07}0wz2ua4*vmYSZ}S*Z8OrgtPbg_6 zfNUrRr>&2lmtqs!c%c2=sCtT{phGrNj^nZjpgnWuSI1s09dWrCBhT zF<3Gffm>&wS^y+(2yQ2uGnj%~F-G9lq9KDhg8_pvxD^QzhqUlO?P8EP#4M0n%yvf! zLk6^lgr#d-`4f~@Kyi}PILo$OBgASTKDGaF$ zISi=`B@C$yDGV+QiC|U;LncEmLn_<_c?_itISe@%x|11l7!nzZ8HyP)8PXUs!8VpK zWHRJ4d3Jy__j4^`&G;A#yk{EOuj2O%q zQW*>x%oq$9(iqafWHN&p7W?xViWt%v5*hLsG8wACK81t~s{N`A{&>`>VlfvKXT=O4 z-(@lsFc2HwDGZqm#S8`D7^`IPV@O1aVI>A<21f=HXc)UQlrp3;6f=}CgfbK}q%ssS z6f@{DI5LzllrSVRBr{|)1T&N}6fvZMd8rIR;M7yfkPLSXNHr+MKtdd%JCC7~ApmTD z2}2qKD0FfebQzo&av1W#X8M8C4Z?1SUPp#xhGej7iWw9bbQu&FTp21DKq;@30TdFL zX*!jmf}wyRlc5MH%t=kz=?p~-`3$8D1q>k!l?(-7`(gPp8k~oa^D8XhVy9y<@=Yc~ z9ykP?!7fY$hd??*F+9(ZY6Hk#Y_=3LI6`x0Izt{qB0~~5uZJ+?GXyc@gV``Y;mYBl zG~)|S!-)*(45{EWlgCg3j&V@>C<5ntNa;bytXzgfhD?SWxG!DKQu@7&D|Y7%&(xn1IViT?R`m`3s~cmmvw7?lTxbxhx1= z0un9}@#zf!rzu!k2Bm>?hG1}x0)-!;&;ymJAQM1w0E!h*{&Zo;XMp%R4--s#7_z`6atXNXPGtb4KuC=PDx1g& zxnOYl2Ps=X`5a^-dYMQ{2nK`Q2PzXY8A=!`spw8fj9||TxLjBOuKCiyDHv1-!s^#V z1|M))3##QIbrGSk!!!w$R`M9q8A=%-B?2)fxLq5z2wA@%89F1 zM|TmZl*k9W2h=VDaWWr#9rQRrE$bi<6uylg^@9ViBnTN&=)bb;I! WhWQod2IAYo*lY!f)q>m95E1|li~{Qb literal 0 HcmV?d00001 diff --git a/Config/Groups/CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency - Exclude.json b/Config/Groups/CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency - Exclude.json new file mode 100644 index 0000000000000000000000000000000000000000..7fd659c6d9fcbe776603a04539f2dda37aebf83b GIT binary patch literal 3832 zcmezWubP3Efr~)_3Y8c#8B!RO7_7j2B?b!yLk3d@0|o;I3kFjLV+LIYLk2SjBZf2v zT?P{d1BN690|s4&B!(2QDv)d%SY;wZ8dzltLn4DYg9U>UgASTKDGaF$ISi=`B@C$y zDGV+QiC|U;LncEmLn_<_c?_itISe@%x|11l7!nzZ8HyP)8PXUs8Ir;JGa2$3@`%t| z#E=SBkI!Z$1|tRo1|tR&23-aN2177u#1H}w2`g||fJj4zC@g+UW$(h%;FJOhX^<{QhCHxZP)aFbNMitn zN-l#gLoh=oLpnHY@)+E}F;xh*HIE^gp^`y?L6<>+!Ihzc0hGo{89;ui*%|D@M1~xO ze1>#}VtDQ#)drBg*la0gaD?VVP?#n%B!P2v2tz(Y5JNtg4f7MO^Z`m8zTniF$dJyE z3QirMxDEn`NC`s`IDbRR2|{M&G9)r&GUUL0iOWuyI#-4~2AG=>GK1-DI2UCxx7+hNMtZ!FbC&iGX`@8O9owrG%Ps@q$igl37Wz)7(n?c2wc_?F8lE5 zh2)H6aL9qm#yo~}hG2#ga2gQP)Zw6-2y6w2&Fr0t_ud2bdC(k z49N`n45i@m3%&FsB?N=P?kff72T&;pD$QY~B4zG`#0d7hfXjsi;F2>9oPt5M9jp#d zWbk3gC#gQhGzpYeKq760p(OQ%4avy@K-7z_}08W#!QFJe47dA(0`OA)CP&+=~H~=;`3} z4C)!7wzN_EY}i78crj3qub2UQZo!_mh&LOXN+q!GKrw*a%5Vp#3*@#iEPcS-Kzv&m Oo2?+RT5y{hLIMD;0RH9x literal 0 HcmV?d00001 diff --git a/Config/MigrationTable.json b/Config/MigrationTable.json new file mode 100644 index 0000000000000000000000000000000000000000..5dd739836781b23156fb1fcd5d6273bd3d023377 GIT binary patch literal 12060 zcmezWubP3Efr~)_3Y8c_7*ZMX7!n!s7)lsC8B!RO7_7i@N(^QU#tbP8#tfDW$qa@J zh77t4$qZ%;X$;8>x(p@^<_ty*sSLUdmJB8gCJadox(q1{MqnKv(t^R9!IHs zL5V>J%}#%YB!(=8REA`R5{6>9jnOEoU@pW(qxu7vDs*ur1{a1*hGK>Sh8%`OhDruM zhD3&3hE%v4lo*^D92pE548Z<%WJqDiWyoa6V<=|O1&0nOtV$R%8A=!`83GuJ81flP zp#I2Y$Y;o7&}DFB$YZEvaAYW8D1h?*nq<~$58d~T+z{OVryAKh2X$%GorVM5bi42wu7GU3)GZ-?YF_?p6&y2y6 z!IVLl!Ggh*!2%q6rVQp_bx90n45kce;FvRFNXCdgT=t`jgHl!{Ljl-FuoUGE4zW^( z0tO|L;<^?s1)xAuC<5o6oFSM(j2KK9(!eoo$zTTdlL3PT zgBgPfIE9!qq%x#1=rSaN^ED`^r-1VXD6bncn1a(s52HXGjB=$DlM;%8*! zg&`4K6BsgBFj#<7PZ|TH#z5sDgaMQqKBaxw)p_svuA(}yzy)4ptCr%7L4E_wx z4Bia749@UWQ^Zio5YCVR?){`PUA1| zTNaiK#tg~OK8y)N3bg#~Y#Uuvv(H1JW28H#(K>b@#N&@9P)RYA3{Zp%d>jbWu zKxtB!!G|H0Asw71LH*)Vh7yJh@R$Rr9}TMEK{TlEOv^F}R33s_oS?S3IeY}e6x{0p zl~JJj2GrL{WB@_XSVkIyC4&J&B7-5godO!qFkmnnt!>b18&FCD^>t8Fk`n`{)=9-N zLINt6(xIgXs9o#NP{iQHkPjYb8OR=u8F<7h6&Io^eu2Hd5J8@MDYXDFs= zO=Zqt4lX%BDZm(9KN&KlK*vQvJvvYw1}a}H7>vLzB2a2c29L&p+CZSTkSPPG^2e+3% zB@k%r7Bt=h8Lv$Si-SrnP;a~lJW2zrvp{`vL|x~?kk3%gkOxk2p#BXlYqTVA8`%)t z+DQecDNwqz1eZ*pF}h@MDg^bY4Z%GrO9s$bOd5FPK9#|UArU-+H#)wHZR{V^wH2w=oJ0Ka*JOOAv z2UM$pN+VFsmIj`aFl9&_ZTX#;23mFRrl_0oMM=(PsLpnnqxMk!9 z?$sB9M+Ng3k{K##TA!IP7=g?y-XS68C)4aqzgkTLm3764b-wi)S?y) z#tfi(5HwE<$@QQaUC?YFs8wsm0IMfJ{cKR2f_g&+;PE3+8UWQ3W(=U2pV5{HB1}Oo z6HreQ6keX-nR8G-1~iKfDeXZqK)s$cVl2i3TpnaF1c7@`*)%NyK(l|4JPjGe2c;HJ zYXa0SGGRz$NCmelK)E~_T$g}axS%n6P`ej2N&`w)pb`Gjbc300K=lSC=?1m-2nW{> zDd4teF@rAyXe`j5A(%mz0e}6W%YfPXg_J#zwli&eOrVx1s3Zc7%78}eKrIi@h#e?w zK%;n&bta%*H>mXi8YKp;OaQH90M$C6{<%4LCUG=l!S;>m5Mr8bB>v z(3}LQRb#@C%3unfM;l$ufZSq%)pMX8G`93aY&}O@Is(l!Zjj}}8p9Y|kEmjSh|gUn9lf>-lpf=6*m!2NDV21f=L1`h@= znzoQ2y=PEg2ULE5<}^XAX+v;11FFG5<9VR80xEk_8FU%UzfFto12{J`rt5q3jT9%TL;v>u1HwHRnk6ewMRTGF7B1vC={ z>S;jw-JmfC(CS-I3kZ~obiw7333wHS0Rt$Vfo4QOYi>r%AJp;(l%_x}OGLbqv#N@? zdJKQ7o0hc~sC5jQ(*&*KGzHIK8G=h4&}(tTb%3%Chw3We144~OW&}=hk)T|1r)qqG3x!_esrVLr&Q5KLbwcypr E07_+JdH?_b literal 0 HcmV?d00001 diff --git a/README.md b/README.md index 36f14cc..6c7b15d 100644 --- a/README.md +++ b/README.md @@ -139,11 +139,48 @@ This policy requires MFA for all internal identities, for all cloud applications > Verify the included group(s) and/or add your custom groups which have all internals in it. ### CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRisk + +This policy blocks all internal users which have a **high risk** (sign-in and user risk) status, to all cloud apps, from all platforms. + +> [!IMPORTANT] +> Verify the included group(s) and/or add your custom groups which have all internals in it. + ### CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices + +This policy sets a Sign-in frequency to a maximum of 12 hours for internals, to all cloud apps, using unmanaged Windows or MacOS devices. + +> [!IMPORTANT] +> Verify the included group(s) and/or add your custom groups which have all internals in it. + ### CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA + +This policy requires MFA for internals when enrolling their devices in Intune. + +> [!IMPORTANT] +> Verify the included group(s) and/or add your custom groups which have all internals in it. + ### CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms + +This policy blocks unknown/unsupported device platforms for internals. + +> [!NOTE] +> Currently only Windows, MacOS, Android and iOS are supported. If (for example) Linux or Windows Phone is allowed you need to modify the policy. + +> [!IMPORTANT] +> Verify the included group(s) and/or add your custom groups which have all internals in it. + ### CA205-Internals-IdentityProtection-AllApps-AnyPlatform-CombinedRegistration + +This policy requires secrity information registration for internals only from a managed or compliant device. + +> [!IMPORTANT] +> Verify the included group(s) and/or add your custom groups which have all internals in it. + ### CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ + +> [!IMPORTANT] +> Verify the included group(s) and/or add your custom groups which have all internals in it. + ### CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA ### CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess ### CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency