Repository navigation
Conversation
…ing or scenario lists A tenant that fails the licence gate returned situations and excluded as a single null, which crashed the situations page reading .group. The endpoint now filters nulls and every simulator page drops null entries before rendering. Synced from CyberDrain/CIPP@0e90a6c
Replace full in-memory Intune and Defender TVM export processing with streaming aggregation so cache jobs and vulnerability endpoints handle large report datasets without excessive allocations. Add Pester coverage for the new export reader and the updated alert/cache/endpoint behavior, and stop persisting large log query caches to localStorage to avoid quota overruns and tab OOMs. Synced from CyberDrain/CIPP@99edfed
Fix: Hide inapplicable actions for roles and mailbox rules Synced from CyberDrain/CIPP@8ae07ff
Feat: Link Alerts and Tenant card headers to their management pages Synced from CyberDrain/CIPP@ad262c4
…brary sync Adds a Clone Template action to the Conditional Access template list and hides Edit Template on synced templates, matching the Intune template list. ExecCloneTemplate now also resets the GUID column (CA templates are looked up by it, so a clone previously resolved to its original) and clears Source, since community sync matches existing templates on displayName + Source and could otherwise overwrite the clone. Synced from CyberDrain/CIPP@790d863
feat(templates): sync GitHub push state for standards/baselines Synced from CyberDrain/CIPP@791350d
feat(bec): BEC case workflow with attacker IP analysis, blast radius and background containment Synced from CyberDrain/CIPP@fd9b7ea
feat(custom-tests): drive the cache explorer from the live _shape end… Synced from CyberDrain/CIPP@f4136b5
…dministration The BEC hub and case workspace now live at /identity/administration/bec and /identity/administration/bec/case, listed at the bottom of the Administration menu. Row actions, the user Compromise Remediation tab, the audit-log action URL rewrite, alert emails, the Hudu/NinjaOne sync links and the bulk-check queue link point at the new routes. The previous /identity/bec routes, the retired reports page and the old per-user bec tab redirect there, query kept. The docs move to match (identity/administration/bec/README.md and case.md), so the help link resolves from the page path and the nav docsPath override goes. Synced from CyberDrain/CIPP@a2d1833
…o date - Add a page for Settings > BEC Remediation Defaults: where the defaults apply (containment drawer, NewRiskyUsers auto-containment, ExecBECRemediate without actions), that the audit-log alert action is not affected, and the built-in six. Add its card to the General settings page docs and SUMMARY. - Rewrite the BEC hub page docs for Start investigation, the All runs / By user views, their columns and the renamed actions. - Case page: containment preselection follows the configurable defaults, add the phishing-sender and sharing-link actions, correct the legacy protocol default (SMTP AUTH is on), fix the bulk action name, the intro that said opening the page starts a run, and the self-anchors broken by the rename. - NewRiskyUsers alert description listed OneDrive sharing as a default action; the built-in set blocks legacy protocols, and it is configurable. Synced from CyberDrain/CIPP@e480e93
…folders - Added support for creating channels and folders in Teams sites during template deployment. - Updated the deployment logic to handle new parameters for channels and folders. - Introduced new functions for creating channels and folders in SharePoint. - Enhanced the frontend to accommodate channel and folder configurations in site templates. - Updated JSON schema to include definitions for channels and folders, ensuring proper validation. Synced from CyberDrain/CIPP@47de5ae
Synced from CyberDrain/CIPP@17b9af0
…tibility - Updated the Start-Cipp-Dev-Windows-docker.ps1 script to check for Node.js installation on PATH or via nvm-windows. - Added logic to verify the required Node.js version specified in frontend/package.json and provide appropriate feedback. - Improved error handling during yarn installation and development server startup, ensuring clearer messaging for users. Synced from CyberDrain/CIPP@b91f876
…dit schema The Audit.AzureActiveDirectory property list offered 'Errorvalue', which is not a field on Azure AD STS logon records. Per the Management Activity API schema the AADSTS error code of a failed login is 'ErrorCode' (LogonError holds the readable reason), so rules built from the picker could never match on the code. Synced from CyberDrain/CIPP@97c30c4
…nditions Audit records for failed Azure AD sign-ins carry the AADSTS code as ErrorNumber and its name as LogonError; there is no ErrorCode property, despite the Management Activity API schema reference using that name, so the previous schema entry could never match. Confirmed against UserLoginFailed records from a live tenant (e.g. ErrorNumber 50074 / LogonError UserStrongAuthClientAuthNRequiredInterrupt). Both properties now use pickers built from Microsoft's published AADSTS error code reference (350 codes, 223 names), and the alert docs explain which property to use with a Conditional Access block example. Synced from CyberDrain/CIPP@b46a693
… header The Recommended containment text hard-coded four actions, while the containment drawer pre-selects from the instance-wide BEC Remediation Defaults. Read the same ListBECRemediationActions catalog the drawer uses and list its default-selected actions. Synced from CyberDrain/CIPP@70d853d
Excluded tenant groups were not being expanded to their member domains when computing assigned/excluded tenant states, allowing group members to remain incorrectly included. The raw group id is still preserved in the exclusions list for display purposes. Also enable group selection in the excluded tenants picker on the baseline template page. Synced from CyberDrain/CIPP@6c60325
MUI Accordion keeps collapsed content mounted, so an AllTenants task mounted one CippDataTable per tenant result. unmountOnExit on the result accordions already fixes that; the extra isExpanded guard duplicated it and removed the content before the collapse transition ran. Adds a vitest pinning that collapsed tenants mount no table and collapsing unmounts the expanded one. Synced from CyberDrain/CIPP@cb22a06
Add support for form submissions that trigger follow-up API requests and return their results in the same response flow. Update JIT admin and template forms to respect tenant scope, clear tenant-bound selections when the tenant changes, and let audit alert exclusions be scheduled independently from CA policy vacation mode. Includes tests for follow-up mutations, form wiring, and tenant-scoped JIT behavior. Synced from CyberDrain/CIPP@4fbcd94
Synced from CyberDrain/CIPP@214edff
The v2 dashboard is the only dashboard now. Drop the dashboardv1 page, its 'Previous Dashboard Experience' tab, and CippUniversalSearch, which only that page used. Synced from CyberDrain/CIPP@f6839a4
Synced from CyberDrain/CIPP@a898307
…s daily - 1d on usage report, Secure Score, MFA state, CIPP cache and domain analyser alerts - 1d on day-threshold alerts that scan whole tenants, and on expiry checks - 6h on low tenant alignment - drop a duplicate recommendedRunInterval on the vulnerabilities alert - the catalog test rejects repeated keys and minimums the alert form does not offer Synced from CyberDrain/CIPP@884418f
Synced from CyberDrain/CIPP@91d3dc4
…status Extends Invoke-ListDevicePolicyStatus with a new 'enrollment' report option covering enrollment configuration policies, including per-report column/orderBy overrides. report=all now returns configuration, compliance and enrollment together. Updates OpenAPI docs, tests and the MEM device page to display enrollment configurations alongside compliance and configuration policies. Synced from CyberDrain/CIPP@a797ae7
Adds a Release field to the BEC containment action catalog (Reverse/Keep/Manual) describing how each action should be undone, and a new ExecBECRelease endpoint backed by Invoke-CIPPBecRelease that reverses sign-in blocks, mailbox protocol restrictions, mobile device blocks, disabled registered devices and targeted Conditional Access policies for a case, while leaving attacker cleanup in place and flagging non-reversible actions for manual review. Invoke-CIPPBecContainment now records pre-change mailbox protocol settings and device block lists so a release can restore prior state accurately, and Set-CIPPMobileDevice clears the opposite allow/block list entry when toggling quarantine. Adds a "Release user" action to the BEC remediation history UI with a confirmation step requiring the user's UPN, plus corresponding Pester and endpoint tests. Closes #887 Synced from CyberDrain/CIPP@da477b3
…ng from the policy builder Synced from CyberDrain/CIPP@07d9174
…g bulk selections Synced from CyberDrain/CIPP@dc36e6e
…he cache is skipped Synced from CyberDrain/CIPP@2b47bcb
- Save to Azure, MCP registration and the auth warmup no longer skip clients stored with Enabled as 'True' - Get-CippApiClient returns Enabled as a bool so the unsaved-changes check matches Synced from CyberDrain/CIPP@0141702
Feat: Email notifications for JIT Admin approvers and requesters Synced from CyberDrain/CIPP@c467b51
… grade them by content - Run each tenant's CA template deploys in their own run, one at a time, and refuse a new one while another is running - Remediate Now sends one request per tenant, carrying every selected standard - Compare each named location the template defines and the policy references against the tenant location the policy is bound to, so a changed range or list variable shows as drift and remediates Fixes #1008 Synced from CyberDrain/CIPP@c93474a
…te editor - Match settings without a template reference by definition id at deploy and compare time - Export policy template setting references and refresh the Intune setting catalog - Stamp template references in the editor and limit the picker to the template's settings Synced from CyberDrain/CIPP@0df54a6
…biguous name Synced from CyberDrain/CIPP@84121fb
Synced from CyberDrain/CIPP@0a4ec1b
Synced from CyberDrain/CIPP@eb34712
… kit Tenant Links, Tenant Summary and User Summary now use the shared CippExtension building blocks and the NinjaOne adaptation the device summary already uses, replacing the legacy card and ConvertTo-Html code. The device summary gets padded cells, coloured chips and border-drawn accents so it survives NinjaOne's style stripping. Fixes the empty Secure Score impact, the US-format tenant creation date and the wrapping OS legend. Adds a date and number format setting for NinjaOne, matching Hudu. Synced from CyberDrain/CIPP@9876fd5
Synced from CyberDrain/CIPP@85ffffc
Synced from CyberDrain/CIPP@be02e8f
Synced from CyberDrain/CIPP@095db0b
…tions and the license chip Synced from CyberDrain/CIPP@73e21f9
Synced from CyberDrain/CIPP@2923233
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )