S6E14 - Securing M365 with ScubaGear: A Deep Dive into CISA’s Assessment Tool
Let's Talk Azure!30 Touko 2025

S6E14 - Securing M365 with ScubaGear: A Deep Dive into CISA’s Assessment Tool

In this episode, we dive deep into ScubaGear, an open-source tool developed by the Cybersecurity and Infrastructure Security Agency (CISA) as part of the Secure Cloud Business Applications (SCuBA) project. Designed to assess Microsoft 365 (M365) tenant configurations, ScubaGear helps organizations align with CISA’s Secure Configuration Baselines (SCBs) to prevent costly misconfigurations. From setup to real-world applications, we unpack how ScubaGear strengthens M365 security and share practical tips for IT admins and security teams. What You’ll Learn:

  • Why ScubaGear Matters: Learn how ScubaGear addresses the growing threat of cloud misconfigurations, which accounted for 30% of cloud attacks in early 2024. We discuss its origins in CISA’s SCuBA project, and its value for US federal agencies, private organizations, and critical infrastructure.
  • How ScubaGear Works: A technical breakdown of ScubaGear’s PowerShell-based workflow, using Microsoft Graph APIs and Open Policy Agent (OPA) to compare tenant settings against SCBs. We cover setup requirements.
  • Common Misconfigurations: Examples like disabled MFA or weak DLP policies, and how ScubaGear’s HTML, JSON, and CSV reports provide actionable remediation steps.
  • Best Practices: Tips for integrating ScubaGear into security workflows, including regular scans, policy customization, and combining with tools like Microsoft Secure Score.
  • Real-World Insights: Sam shares experiences from consulting.

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

Jaksot(155)

S6E12 - Microsoft updates April - new products and features released

S6E12 - Microsoft updates April - new products and features released

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our in...

2 Touko 202553min

S6E11 - Insights into Microsoft Secure 2025

S6E11 - Insights into Microsoft Secure 2025

This week, Alan and Sam talk about new features and services that have been announced at Microsoft Secure 2025 Some of the Microsoft product features and update we covered: Security Copilot Agents Da...

25 Huhti 202554min

S6E10 - Microsoft updates March - new products and features released

S6E10 - Microsoft updates March - new products and features released

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our in...

11 Huhti 202541min

S6E9 - Monitor your OAuth Apps using Defender for Cloud Apps

S6E9 - Monitor your OAuth Apps using Defender for Cloud Apps

This episode Alan and Sam dive into the issues around OAuth apps and understanding how they are being used. Alan discusses the issues organisations are facing when any user could consent to applicatio...

28 Maalis 202538min

S6E8 - Mapping the Threatscape: Security Explorer & Attack Paths in Microsoft Defender for Cloud

S6E8 - Mapping the Threatscape: Security Explorer & Attack Paths in Microsoft Defender for Cloud

In this episode, we dive into two great features of Microsoft Defender for Cloud: Security Explorer and Attack Paths. Join us as we unpack how these tools leverage the Cloud Security Graph to help you...

21 Maalis 202547min

S6E7 - Microsoft updates February - new products and features released

S6E7 - Microsoft updates February - new products and features released

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our in...

14 Maalis 202547min

S6E6 - Protect your servers with Defender for Server

S6E6 - Protect your servers with Defender for Server

Alan and Sam dive into Defender for Cloud's Protective workload for server. Alan goes through the different plans available and the features that are available. Here are a few things we covered: What...

21 Helmi 202549min

S6E5 - Securing Your Data: Exploring Defender for Databases in Microsoft Defender for Cloud

S6E5 - Securing Your Data: Exploring Defender for Databases in Microsoft Defender for Cloud

In this episode, we dive into the world of database security with Microsoft's Defender for Databases. Join us as we explore how this tool within Microsoft Defender for Cloud can transform your approac...

14 Helmi 202551min