EIDSCA.PR03 - Default Settings - Password Rule Settings - Enforce custom list.
Overview
When enabled, the words in the list below are used in the banned password system to prevent easy-to-guess passwords.
Password protection in Microsoft Entra ID - Microsoft Entra ID - Microsoft Learn
Test script
https://graph.microsoft.com/beta/settings
.values -eq 'True'
Related links
- Open in Graph Explorer
- directorySetting resource type - Microsoft Graph beta | Microsoft Learn
- View in Microsoft Entra admin center
MITRE ATT&CK
| Tactic | Technique | Mitigation |
|---|---|---|
| TA0006 - Credential Access - Credential Access | T1110 - Brute Force | M1018 - User Account Management M1027 - Password Policies |
Test Metadata
| Field | Value |
|---|---|
| Test ID | EIDSCA.PR03 |
| Severity | Medium |
| Suite | Entra ID SCA |
| Product | Entra ID |
| Feature | Password protection |
| Area | Authentication |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | T1110 Brute Force |
| Supports controls | nist-800-53-r5:IA-5(1) |
| PowerShell test | Test-MtCheckEidscaPR03 |
| Services | Graph |
| Compatible licenses | AAD_PREMIUM |
Source
- Test:
tests/eidsca/Test.EIDSCA.PR03.ps1 - Documentation:
tests/eidsca/Test.EIDSCA.PR03.md