Maester Your Microsoft 365 Security Posture

Are you confident that your Microsoft Entra ID and Microsoft 365 tenant configurations follow security best practices — today and every day? Misconfigurations are one of the leading causes of security incidents in cloud environments, yet many organizations lack continuous validation of their security posture. In this session, Fabian Bader and Thomas Naunheim introduce Maester 2.0, an open-source PowerShell-based testing framework that automates security configuration checks for Microsoft Entra ID and Microsoft 365. Built on top of Pester, Maester enables security teams and administrators to continuously validate their tenant against established best practices and custom organizational policies. We start with an introduction to Maester's core concepts and architecture before diving into the recent enhancements that make customization and reporting more powerful than ever. You will see a hands-on walkthrough of writing your own custom tests — tailored to your organization's unique security requirements — and learn how to integrate Maester into your ongoing security posture monitoring through automated pipelines.