packs/zero-trust-assessment/maester-pack.json

{
  "$schema": "https://maester.dev/schemas/maester-pack-1.0.json",
  "Id": "maester.zero-trust-assessment",
  "Guid": "d1e2db80-6c27-4cb6-9389-2edf0a898d23",
  "Name": "Microsoft Zero Trust Assessment",
  "Description": "Runs Microsoft's Zero Trust Assessment and shows each of its results in the Maester report.",
  "Version": "0.1.0",
  "Publisher": "maester365",
  "License": "MIT",
  "Banner": "assets/banner.png",
  "Guide": "maester-pack.guide.json",
  "Homepage": "https://maester.dev/docs/packs/zero-trust-assessment",
  "Support": "https://github.com/maester365/maester/issues",
  "SecurityContact": "https://github.com/maester365/maester/security/policy",
  "RequiresMaester": ">=3.0",
  "Code": "ZTA",
  "Suites": ["tests"],
  "Helpers": ["helpers"],
  "Catalog": "catalog.json",
  "Uses": {
    "Services": ["Graph"],
    "GraphScopes": [
      "Application.Read.All", "AuditLog.Read.All", "CopilotPackages.Read.All", "CrossTenantInformation.ReadBasic.All",
      "CustomSecAttributeAssignment.Read.All", "DeviceManagementApps.Read.All", "DeviceManagementConfiguration.Read.All",
      "DeviceManagementManagedDevices.Read.All", "DeviceManagementRBAC.Read.All", "DeviceManagementServiceConfig.Read.All",
      "Directory.Read.All", "DirectoryRecommendations.Read.All", "EntitlementManagement.Read.All", "IdentityRiskEvent.Read.All",
      "IdentityRiskyServicePrincipal.Read.All", "IdentityRiskyUser.Read.All", "LifecycleWorkflows-Workflow.Read.All",
      "NetworkAccess.Read.All", "Policy.Read.All", "Policy.Read.ConditionalAccess", "Policy.Read.PermissionGrant",
      "PrivilegedAccess.Read.AzureAD", "PrivilegedAssignmentSchedule.Read.AzureADGroup",
      "PrivilegedEligibilitySchedule.Read.AzureADGroup", "Reports.Read.All", "RoleManagement.Read.All",
      "SecurityAlert.Read.All", "SecurityEvents.Read.All", "SecurityIdentitiesHealth.Read.All",
      "SecurityIdentitiesSensors.Read.All", "SecurityIncident.Read.All", "ThreatHunting.Read.All",
      "UserAuthenticationMethod.Read.All"
    ],
    "TenantWrites": [],
    "Network": [],
    "Modules": [
      { "Name": "ZeroTrustAssessment", "MinimumVersion": "3.1.0", "Install": "User", "Process": "Child" }
    ]
  },
  "Categories": ["Microsoft 365", "Zero Trust", "Identity", "Devices", "Network", "Data"],
  "Report": {
    "Logo": "microsoft",
    "Navigation": [
      { "Title": "Overview", "View": "pack" },
      { "Section": "Zero Trust plan", "Id": "plan", "View": "plan", "Attachment": "zero-trust-workshop", "Expand": ["pillars", "areas", "lanes"] },
      { "Section": "Assessment results", "Items": [
        { "Title": "All results", "Id": "results", "View": "tests" },
        { "Title": "Not met", "Id": "not-met", "View": "tests", "Result": "Failed" },
        { "Title": "By pillar", "Id": "by-pillar", "View": "tests", "GroupBy": ["Pillar", "Category"] },
        { "Title": "Assessment report", "View": "attachment", "Attachment": "Zero Trust Assessment" }
      ] },
      { "Section": "Set up", "Items": [
        { "Title": "Get started", "Id": "start", "View": "guide", "Page": "start" },
        { "Title": "Connect", "Id": "connect", "View": "guide", "Page": "connect" },
        { "Title": "Run", "Id": "run", "View": "guide", "Page": "run" }
      ] },
      { "Title": "About this pack", "Id": "about", "View": "about" }
    ]
  }
}