Skip to main content

Mondoo Microsoft 365 (MS365) Resource Pack Reference

The Microsoft 365 (MS365) resource pack lets you use MQL to query and assess the security of your Microsoft 365 identities and configuration.

Resources included in this pack:

IDDESCRIPTION
microsoftMicrosoft
microsoft.applicationMicrosoft Entra ID application registration
microsoft.application.permissionMicrosoft Service Principal Permission
microsoft.application.roleMicrosoft Entra ID app roles are custom roles to assign permissions to users or apps
microsoft.conditionalAccessMicrosoft Conditional Access Policies
microsoft.conditionalAccess.ipNamedLocationMicrosoft Conditional Access IP named location
microsoft.devicemanagementMicrosoft device management
microsoft.devicemanagement.devicecompliancepolicyMicrosoft device compliance policy
microsoft.devicemanagement.deviceconfigurationMicrosoft device configuration
microsoft.domainMicrosoft domain
microsoft.domaindnsrecordMicrosoft domain DNS record
microsoft.groupMicrosoft group
microsoft.keyCredentialMicrosoft Entra AD Application certificate
microsoft.passwordCredentialMicrosoft Entra AD Application secrets
microsoft.policiesMicrosoft policies
microsoft.rolemanagementDeprecated: use microsoft.roles instead
microsoft.rolemanagement.roleassignmentMicrosoft role assignment
microsoft.rolemanagement.roledefinitionMicrosoft role definition
microsoft.securityMicrosoft Security
microsoft.security.riskyUserMicrosoft Entra users who are at risk
microsoft.security.securityscoreMicrosoft Secure Score
microsoft.serviceprincipalMicrosoft service principal (Enterprise application)
microsoft.serviceprincipal.assignmentMicrosoft Service Principal Assignment
microsoft.tenantMicrosoft Entra tenant
microsoft.userMicrosoft Entra ID user
microsoft.user.authenticationMethodsMicrosoft Entra authentication methods
ms365.exchangeonlineMicrosoft 365 Exchange Online
ms365.exchangeonline.exoMailboxMicrosoft 365 Exchange Online Mailbox
ms365.exchangeonline.externalSenderMicrosoft 365 Exchange Online External Sender
ms365.exchangeonline.reportSubmissionPolicyReport Submission Policy configuration
ms365.exchangeonline.teamsProtectionPolicyTeams Protection Policy configuration
ms365.sharepointonlineMicrosoft 365 SharePoint Online
ms365.sharepointonline.siteMicrosoft 365 SharePoint Site
ms365.teamsMicrosoft 365 Teams
ms365.teams.teamsMeetingPolicyConfigMicrosoft 365 Teams meeting policy configuration
ms365.teams.teamsMessagingPolicyConfigTeams meeting policy configuration
ms365.teams.tenantFederationConfigMicrosoft 365 Teams tenant federation configuration