NLBaselineCA
1.0.0
AI-powered PowerShell module for managing and analyzing Microsoft 365 Conditional Access policies with Zero Trust security baseline, comprehensive gap analysis, and multi-agent AI security advisory
Minimum PowerShell version
7.0
Installation Options
Owners
Copyright
(c) 2025 Baseline Secure Cloud. All rights reserved.
Package Details
Author(s)
- Baseline Secure Cloud
Tags
Microsoft365 ConditionalAccess Security Baseline AI ZeroTrust EntraID AzureAD MFA Compliance
Functions
Start-NLBaselineCA Connect-NLBaselineCA Export-NLBaselineCAPolicies Import-NLBaselineCABaseline Get-NLBaselineCASecurityAdvisory Get-NLBaselineCAPoliciesList Set-NLBaselineCAPoliciesMode Get-NLBaselineCANamedLocations Get-NLBaselineCAReportOnlyAnalysis Set-NLBaselineCABreakGlassGroup Get-NLBaselineCAPolicyDetails Remove-NLBaselineCAOrphanedObjects Copy-NLBaselineCAPolicies Set-NLBaselineCAPolicyAdminRoles Rename-NLBaselineCAPolicies Get-NLBaselineCACISCompliance Remove-NLBaselineCAAllPolicies Import-NLBaselineCABaselineDebug Fix-NLBaselineCAPolicyNaming
Dependencies
This module has no dependencies.
Release Notes
Initial release v1.0.0
- AI-powered security analysis with multi-agent system
- Zero Trust security baseline policies
- Comprehensive gap analysis and risk assessment
- Policy management and compliance validation
- Support for 2025/2026 Conditional Access features
FileList
- NLBaselineCA.nuspec
- Baseline\2025-2026-NEW-FEATURES.md
- Baseline\CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA.json
- Baseline\CA007-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-HighRiskCountries.json
- Baseline\CA011-Global-BaseProtection-MobileDesktop-AnyPlatform-CompliantDevice.json
- Baseline\CA015-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-NonBrowserClients.json
- Baseline\CA019-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationStrength-PhishingResistant.json
- Baseline\CA103-Admins-IdentityProtection-AllApps-AnyPlatform-PersistentBrowser.json
- Baseline\CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA.json
- Baseline\CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA.json
- Baseline\CA206-Internals-IdentityProtection-AllApps-AnyPlatform-PersistentBrowser.json
- Baseline\CA209-Internals-IdentityProtection-AllApps-AnyPlatform-ContinuousAccessEvaluation.json
- Baseline\CA300-ServiceAccounts-IdentityProtection-AnyApp-AnyPlatform-MFA.json
- Baseline\CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess.json
- Baseline\CA404-GuestUsers-AttackSurfaceReduction-SelectedApps-AnyPlatform-BLOCK.json
- Baseline\NAMING-CONVENTION.md
- Private\Invoke-AISecurityAnalysis.ps1
- Private\New-ExcludeGroup.ps1
- Public\Copy-NLBaselineCAPolicies.ps1
- Public\Get-NLBaselineCACISCompliance.ps1
- Public\Get-NLBaselineCAPolicyDetails.ps1
- Public\Import-NLBaselineCABaseline.ps1
- Public\Remove-NLBaselineCAOrphanedObjects.ps1
- Public\Set-NLBaselineCAPoliciesMode.ps1
- NLBaselineCA.psd1
- Baseline\CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA.json
- Baseline\CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows.json
- Baseline\CA008-Global-Compliance-AnyApp-AnyPlatform-TermsOfUse.json
- Baseline\CA012-Global-BaseProtection-RegisterSecurityInfo-AnyPlatform-SESSION.json
- Baseline\CA016-Global-IdentityProtection-AnyApp-AnyPlatform-TokenProtection.json
- Baseline\CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA.json
- Baseline\CA104-Admins-IdentityProtection-AllApps-AnyPlatform-ContinuousAccessEvaluation.json
- Baseline\CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRiskUser.json
- Baseline\CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms.json
- Baseline\CA207-Internals-AttackSurfaceReduction-SelectedApps-AnyPlatform-BLOCK.json
- Baseline\CA210-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRiskSignIn.json
- Baseline\CA301-ServiceAccounts-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUntrustedLocations.json
- Baseline\CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json
- Baseline\CA500-Agents-IdentityProtection-AnyApp-AnyPlatform-MFA.json
- Private\Get-AllConditionalAccessPolicies.ps1
- Private\Invoke-OpenAICall.ps1
- Private\Start-QuickStart.ps1
- Public\Export-NLBaselineCAPolicies.ps1
- Public\Get-NLBaselineCANamedLocations.ps1
- Public\Get-NLBaselineCAReportOnlyAnalysis.ps1
- Public\Import-NLBaselineCABaselineDebug.ps1
- Public\Rename-NLBaselineCAPolicies.ps1
- Public\Set-NLBaselineCAPolicyAdminRoles.ps1
- NLBaselineCA.psm1
- Baseline\CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist.json
- Baseline\CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload.json
- Baseline\CA009-Global-IdentityProtection-AnyApp-AnyPlatform-GRANT-MediumRiskSignins.json
- Baseline\CA013-Global-IdentityProtection-AzureManagement-AnyPlatform-MFA.json
- Baseline\CA017-Global-IdentityProtection-AnyApp-AnyPlatform-GlobalSecureAccess-CompliantNetwork.json
- Baseline\CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA.json
- Baseline\CA105-Admins-IdentityProtection-AnyApp-AnyPlatform-PhishingResistantMFA.json
- Baseline\CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices.json
- Baseline\CA205-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ.json
- Baseline\CA208-Internals-BaseProtection-AnyApp-MacOS-Compliant.json
- Baseline\CA211-Internals-IdentityProtection-AnyApp-AnyPlatform-SelfRemediation-Passwordless.json
- Baseline\CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA.json
- Baseline\CA403-GuestUsers-IdentityProtection-AllApps-AnyPlatform-PersistentBrowser.json
- Baseline\CA501-Agents-AttackSurfaceReduction-SelectedApps-AnyPlatform-BLOCK-UntrustedNetwork.json
- Private\Get-ConfigPath.ps1
- Private\New-DefaultNamedLocations.ps1
- Public\Connect-NLBaselineCA.ps1
- Public\Fix-NLBaselineCAPolicyNaming.ps1
- Public\Get-NLBaselineCAPoliciesList.ps1
- Public\Get-NLBaselineCASecurityAdvisory.ps1
- Public\Remove-NLBaselineCAAllPolicies.ps1
- Public\Set-NLBaselineCABreakGlassGroup.ps1
- Public\Start-NLBaselineCA.ps1
- README.md
- Baseline\CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication.json
- Baseline\CA006-Global-DataProtection-Office365-iOSenAndroid-RequireAppProtection.json
- Baseline\CA010-Global-IdentityProtection-AnyApp-AnyPlatform-GRANT-MediumRiskUsers.json
- Baseline\CA014-Global-IdentityProtection-AdminPortals-AnyPlatform-MFA.json
- Baseline\CA018-Global-IdentityProtection-AnyApp-AnyPlatform-InsiderRisk-AdaptiveProtection.json
- Baseline\CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency.json
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 1.0.0 (current version) | 5 | 1/23/2026 |