[Bug]:Missing Entra Rules

[qbrusa]

What happened?
After scanning the resources, the assessment seems to not works fully because the path of findings rules seems to be missing/wrong.

How to reproduce it
Steps to reproduce the behavior:

$param = @{
    ClientId = '<client-id>';
    ClientSecret = ("<client-secret>" | ConvertTo-SecureString -AsPlainText -Force);
    Instance = 'Microsoft365';
    Collect =  @('ExchangeOnline','MicrosoftTeams','Purview','SharePointOnline');
    TenantID = '<tenant-id>';
    IncludeEntraID = $true;
    ExportTo = @('HTML',"CSV","JSON");
}
Invoke-Monkey365 @param

Expected behavior
No WARNING errors

Screenshots or Logs

WARNING: File eid-pim-permanent-privileged-roles-assigned.json was not found in C:\Users\user\Documents\PowerShell\Modules\monkey365\0.98.5\rules\findings
WARNING: File ms-exo-personal-email-account-and-calendar-allowed.json was not found in C:\Users\user\Documents\PowerShell\Modules\monkey365\0.98.5\rules\findings

From where are you running Monkey365?
Please, complete the following information:

• Resource: Workstation
• OS: Windows 11
• PowerShell Version [$PsVersionTable]:

Name                           Value
----                           -----

PSVersion                      7.4.18
PSEdition                      Core
GitCommitId                    7.4.18
OS                             Microsoft Windows 10.0.26100
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

• Monkey365 Version: 0.98.5

[silverhack]

Hi @qbrusa thanks for letting me know about that.

I can confirm that it's a bug. I'm still working on the Microsoft Entra rules used by both the Azure and Microsoft 365 benchmarks and also on rules, rulesets and collectors for Azure.

As a result, some rules may not be available at the moment. I'm preparing a new release planned for next week, and I'll do my best to have this issue resolved as part of that release.

Thanks!