Eight fast checks against the settings attackers abuse most often in small-business Microsoft 365 tenants. It writes an HTML report with PASS / WARN / FAIL results and what to do about each one. It changes NOTHING. It asks for read-only Microsoft Graph permissions and only reads settings. Checks: MFA enforcement (Security Defaults / Conditional A... More info