Sample-Reports/IndividualReports/EXOReport.json
|
[
{ "ReportSummary": { "Manual": 0, "AnnotatedFailedPolicies": { }, "Failures": 0, "Warnings": 1, "Errors": 0, "Passes": 11, "Omits": 0, "Date": "05/04/2026 17:15:48 Coordinated Universal Time", "IncorrectResults": 0 }, "Results": [ { "GroupName": "Automatic Forwarding to External Domains", "GroupNumber": "1", "GroupReferenceURL": "https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#1-automatic-forwarding-to-external-domains", "Controls": [ { "Control ID": "MS.EXO.1.1v2", "Requirement": "Automatic forwarding to external domains SHALL be disabled.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/docs/configuration/configuration.md#automatic-forwarding-to-remote-domains' target='_blank' class='indicator indicator-configurable' title='Configurable'>Configurable</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "No domains allow automatic forwarding.", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "No domains allow automatic forwarding.", "Comments": [ ], "ResolutionDate": null } ] }, { "GroupName": "Sender Policy Framework", "GroupNumber": "2", "GroupReferenceURL": "https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#2-sender-policy-framework", "Controls": [ { "Control ID": "MS.EXO.2.2v3", "Requirement": "An SPF policy SHALL be published for each domain that fails all non-approved senders.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/docs/configuration/parameters.md#preferreddnsresolvers' target='_blank' class='indicator indicator-configurable' title='Configurable'>Configurable</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "Comments": [ ], "ResolutionDate": null } ] }, { "GroupName": "DomainKeys Identified Mail", "GroupNumber": "3", "GroupReferenceURL": "https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#3-domainkeys-identified-mail", "Controls": [ { "Control ID": "MS.EXO.3.1v1", "Requirement": "DKIM SHOULD be enabled for all domains.<div class='policy-indicators'><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/docs/configuration/parameters.md#preferreddnsresolvers' target='_blank' class='indicator indicator-configurable' title='Configurable'>Configurable</a></div>", "Result": "Warning", "Criticality": "Should", "Details": "1 agency domain(s) found in violation: tqhjy.onmicrosoft.com. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Warning", "OriginalDetails": "1 agency domain(s) found in violation: tqhjy.onmicrosoft.com. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "Comments": [ ], "ResolutionDate": null } ] }, { "GroupName": "Domain-Based Message Authentication, Reporting, and Conformance (DMARC)", "GroupNumber": "4", "GroupReferenceURL": "https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#4-domain-based-message-authentication-reporting-and-conformance-dmarc", "Controls": [ { "Control ID": "MS.EXO.4.1v1", "Requirement": "A DMARC policy SHALL be published for every second-level domain.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/docs/configuration/parameters.md#preferreddnsresolvers' target='_blank' class='indicator indicator-configurable' title='Configurable'>Configurable</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "Comments": [ ], "ResolutionDate": null }, { "Control ID": "MS.EXO.4.2v1", "Requirement": "The DMARC message rejection option SHALL be p=reject.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/docs/configuration/parameters.md#preferreddnsresolvers' target='_blank' class='indicator indicator-configurable' title='Configurable'>Configurable</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "Comments": [ ], "ResolutionDate": null }, { "Control ID": "MS.EXO.4.3v1", "Requirement": "The DMARC point of contact for aggregate reports SHALL include `reports@dmarc.cyber.dhs.gov`.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/docs/configuration/parameters.md#preferreddnsresolvers' target='_blank' class='indicator indicator-configurable' title='Configurable'>Configurable</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "Comments": [ ], "ResolutionDate": null }, { "Control ID": "MS.EXO.4.4v1", "Requirement": "An agency point of contact SHOULD be included for aggregate and failure reports.<div class='policy-indicators'><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/docs/configuration/parameters.md#preferreddnsresolvers' target='_blank' class='indicator indicator-configurable' title='Configurable'>Configurable</a></div>", "Result": "Pass", "Criticality": "Should", "Details": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met. <a href=\"#dns-logs\">View DNS logs</a> for more details.", "Comments": [ ], "ResolutionDate": null } ] }, { "GroupName": "Simple Mail Transfer Protocol Authentication", "GroupNumber": "5", "GroupReferenceURL": "https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#5-simple-mail-transfer-protocol-authentication", "Controls": [ { "Control ID": "MS.EXO.5.1v1", "Requirement": "SMTP AUTH SHALL be disabled.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "Requirement met", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met", "Comments": [ ], "ResolutionDate": null } ] }, { "GroupName": "Calendar and Contact Sharing", "GroupNumber": "6", "GroupReferenceURL": "https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#6-calendar-and-contact-sharing", "Controls": [ { "Control ID": "MS.EXO.6.1v1", "Requirement": "Contact folders SHALL NOT be shared with all domains.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "Requirement met", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met", "Comments": [ ], "ResolutionDate": null }, { "Control ID": "MS.EXO.6.2v1", "Requirement": "Calendar details SHALL NOT be shared with all domains.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "Requirement met", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met", "Comments": [ ], "ResolutionDate": null } ] }, { "GroupName": "External Sender Warnings", "GroupNumber": "7", "GroupReferenceURL": "https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#7-external-sender-warnings", "Controls": [ { "Control ID": "MS.EXO.7.1v1", "Requirement": "External sender warnings SHALL be implemented.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "Requirement met", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met", "Comments": [ ], "ResolutionDate": null } ] }, { "GroupName": "Mailbox Auditing", "GroupNumber": "13", "GroupReferenceURL": "https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#13-mailbox-auditing", "Controls": [ { "Control ID": "MS.EXO.13.1v1", "Requirement": "Mailbox auditing SHALL be enabled.<div class='policy-indicators'><a href='https://www.cisa.gov/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services' target='_blank' class='indicator indicator-bod' title='BOD 25-01 Requirement'>BOD 25-01 Requirement</a><a href='https://github.com/cisagov/ScubaGear/blob/v1.8.0/PowerShell/ScubaGear/baselines/exo.md#key-terminology' target='_blank' class='indicator indicator-automated' title='Automated Check'>Automated Check</a></div>", "Result": "Pass", "Criticality": "Shall", "Details": "Requirement met", "OmittedEvaluationResult": "N/A", "OmittedEvaluationDetails": "N/A", "IncorrectResult": "N/A", "IncorrectResultDetails": "N/A", "OriginalResult": "Pass", "OriginalDetails": "Requirement met", "Comments": [ ], "ResolutionDate": null } ] } ], "MetaData": { "Tenant Display Name": "tqhjy", "Report Date": "05/04/2026 17:15:48 Coordinated Universal Time", "Baseline Version": "1", "Module Version": "1.8.0" } } ] |