EN PT-BR
← Voltar ao feed
low government

CISA promotes free ScubaGear and ScubaGoggles tools to audit Microsoft 365 and Google Workspace configurations

1 fonte(s) · 1 atualização(ões) · publicado 28/10/2026 02:24 · coletado há 4 dias

CISA offers two free assessment tools, ScubaGear (Microsoft 365) and ScubaGoggles (Google Workspace), built under the Secure Cloud Business Applications (SCuBA) project launched in 2022. The tools compare tenant settings against CISA's security baselines and report configuration gaps. They are not malware scanners and do not remediate automatically. The project primarily supports Federal Civilian Executive Branch agencies, but private organizations can use it too.

Detalhes técnicos

  • ScubaGear uses PowerShell to query Microsoft 365 APIs and evaluates the settings with Open Policy Agent using Rego policies. It exports HTML, JSON and CSV.
  • Baseline coverage includes Microsoft Entra ID, Exchange Online, Microsoft Teams, SharePoint, Power BI, Power Platform and security suite settings. Controls are mapped to NIST SP 800-53 and MITRE ATT&CK.
  • YAML configuration files let users document intentional deviations through exclusions, annotations or omissions.
  • ScubaGoggles uses the Google Admin SDK API and other Google APIs to collect settings, logs and metadata. It evaluates them with Open Policy Agent and Rego and outputs HTML and JSON.
  • CISA labels ScubaGoggles alpha-stage and warns its output may be incorrect and must be validated.

Remediação

  • Install ScubaGear from the PowerShell Gallery. Source code and documentation are in CISA's GitHub repository.
  • Review findings manually, implement changes, document justified exceptions and reassess afterwards.
  • Check prerequisites, permissions and tool limitations before deploying across cloud environments.

Linha do tempo

  1. gbhackers.com ↗ · pub. 28/10/2026 02:24 · coletado 28/10 03:00 primeiro registro

    CISA promotes free ScubaGear and ScubaGoggles tools to audit Microsoft 365 and Google Workspace configurations

    ler a análise desta fonte

    CISA offers two free assessment tools, ScubaGear (Microsoft 365) and ScubaGoggles (Google Workspace), built under the Secure Cloud Business Applications (SCuBA) project launched in 2022. The tools compare tenant settings against CISA's security baselines and report configuration gaps. They are not malware scanners and do not remediate automatically. The project primarily supports Federal Civilian Executive Branch agencies, but private organizations can use it too.

    Technical Details

    • ScubaGear uses PowerShell to query Microsoft 365 APIs and evaluates the settings with Open Policy Agent using Rego policies. It exports HTML, JSON and CSV.
    • Baseline coverage includes Microsoft Entra ID, Exchange Online, Microsoft Teams, SharePoint, Power BI, Power Platform and security suite settings. Controls are mapped to NIST SP 800-53 and MITRE ATT&CK.
    • YAML configuration files let users document intentional deviations through exclusions, annotations or omissions.
    • ScubaGoggles uses the Google Admin SDK API and other Google APIs to collect settings, logs and metadata. It evaluates them with Open Policy Agent and Rego and outputs HTML and JSON.
    • CISA labels ScubaGoggles alpha-stage and warns its output may be incorrect and must be validated.

    Remediation

    • Install ScubaGear from the PowerShell Gallery. Source code and documentation are in CISA's GitHub repository.
    • Review findings manually, implement changes, document justified exceptions and reassess afterwards.
    • Check prerequisites, permissions and tool limitations before deploying across cloud environments.