List view

ScubaGear report summary screen label "manual checks" is not accurate

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1269 In cisagov/ScubaGear;

· tkol2022 opened on Aug 8, 2024

Update conditional statement in CreateReport.psm1 for new SHALL/Conditional policies

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

Feature

#1548 In cisagov/ScubaGear;

· ahuynhMITRE opened on Feb 3, 2025

Update the CI pipeline workflow to include the workflow unit tests

bugThis issue or pull request addresses broken functionalityThis issue or pull request addresses broken functionality

Status: Open.

Bug

#1929 In cisagov/ScubaGear;

· mitchelbaker-cisa opened on Jan 14, 2026

Update rego for Defender policy group 2 false positives for runs that do not have any user, group or domains configured for impersonation protection.

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

Bug

#1840 In cisagov/ScubaGear;

· FollyBeachGurl opened on Oct 14, 2025

Update MS.DEFENDENDER2.1v1, MS.DEFENDENDER2.2v1, and MS.DEFENDENDER2.3v1 implementation steps to require at least a user, group or domain to be configured for impersonation protection

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

refinementThis issue needs to be refined in order to meet the Definition of Ready.This issue needs to be refined in order to meet the Definition of Ready.

Status: Open.

Bug

#1842 In cisagov/ScubaGear;

· FollyBeachGurl opened on Oct 15, 2025

Analyze current Microsoft recommended conditional access policies against Scuba

analysis-requiredThis issue requires review or analysis work to completeThis issue requires review or analysis work to complete

Status: Open.

#1927 In cisagov/ScubaGear;

· tkol2022 opened on Jan 12, 2026

Update baseline instructions for Entra policy 5.2 to allow user consent for low risk permissions

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1944 In cisagov/ScubaGear;

· tkol2022 opened on Jan 22, 2026

Update Entra policy 5.2 to fix bug associated ScubaGear producing a Pass for a non-compliant value and support an additional acceptable configuration value

bugThis issue or pull request addresses broken functionalityThis issue or pull request addresses broken functionality

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1945 In cisagov/ScubaGear;

· tkol2022 opened on Jan 22, 2026

Conduct hands-on prototyping of new conditional access Microsoft managed user risk remediation

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1925 In cisagov/ScubaGear;

· tkol2022 opened on Jan 12, 2026

Create revised list of highly privileged roles for ScubaGear's Entra ID privileged access policies

analysis-requiredThis issue requires review or analysis work to completeThis issue requires review or analysis work to complete

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1330 In cisagov/ScubaGear;

· tkol2022 opened on Sep 24, 2024

Add support for guest user and cloud application exclusions in Entra conditional access policies

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1942 In cisagov/ScubaGear;

· tkol2022 opened on Jan 22, 2026

Track and adjudicated all SCB consolidated change document updates for v1.8.0

baseline-documentIssues relating to the text in the baseline documents themselvesIssues relating to the text in the baseline documents themselves

Status: Open.

Task

#1952 In cisagov/ScubaGear;

· ahuynhECS opened on Jan 29, 2026

Conduct prototyping to simulate an Agent marked as risky in Entra Identity Protection

analysis-requiredThis issue requires review or analysis work to completeThis issue requires review or analysis work to complete

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1949 In cisagov/ScubaGear;

· tkol2022 opened on Jan 27, 2026

Enhancement for ScubaGear to support ED 25-02 via pulling legacy Office 365 Exchange Online first-party service principal

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1955 In cisagov/ScubaGear;

· ahuynhECS opened on Feb 2, 2026

Conduct hands-on prototyping of MFA instead of block for sign in risk

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1926 In cisagov/ScubaGear;

· tkol2022 opened on Jan 12, 2026

Add centralized logging module for Scuba Runs

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open (in progress).

cisagov/ScubaGearnumber 1970

#1970 In cisagov/ScubaGear;

· DickTracyII opened on Feb 6, 2026

PIM Iteration 2 Deprecation

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1930 In cisagov/ScubaGear;

· MichaelHicks-MSFT opened on Jan 15, 2026

ScubaGear enhancement investigation into full visibility on Exchange Hybrid configurations

analysis-requiredThis issue requires review or analysis work to completeThis issue requires review or analysis work to complete

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

Feature

#1956 In cisagov/ScubaGear;

· ahuynhECS opened on Feb 2, 2026

RunUnitTests.ps1 and RunPesterTests.ps1 are ambiguous script names

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1989 In cisagov/ScubaGear;

· tkol2022 opened on Feb 17, 2026

Configuration Editor Validation Warnings

bugThis issue or pull request addresses broken functionalityThis issue or pull request addresses broken functionality

public-reportedThis issue is reported by the public users of the tool.This issue is reported by the public users of the tool.

Status: Open.

#1983 In cisagov/ScubaGear;

· reevesjeremy opened on Feb 12, 2026

Rename RunUnitTests.ps1 RunPesterTests.ps1 to align with their purpose and Keep copy of ModifiedProviderSettingsExport to reference during development

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open (in progress).

cisagov/ScubaGearnumber 1994

#1994 In cisagov/ScubaGear;

· tkol2022 opened on Feb 17, 2026

Assign a severity score to each risky app/service principal

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open.

#1995 In cisagov/ScubaGear;

· mitchelbaker-cisa opened on Feb 17, 2026

Add a severity score to risky apps module

bugThis issue or pull request addresses broken functionalityThis issue or pull request addresses broken functionality

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open (in progress).

cisagov/ScubaGearnumber 1999

#1999 In cisagov/ScubaGear;

· mitchelbaker-cisa opened on Feb 19, 2026

Remove PIM Iteration 2 References

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

Status: Open (in progress).

cisagov/ScubaGearnumber 2006

#2006 In cisagov/ScubaGear;

· MichaelHicks-MSFT opened on Feb 24, 2026

Investigate ScubaGear logging capability

enhancementThis issue or pull request will add new or improve existing functionalityThis issue or pull request will add new or improve existing functionality

hands-on-prototypingReviewing an M365 feature by performing hands-on prototypingReviewing an M365 feature by performing hands-on prototyping

Status: Open.

#1326 In cisagov/ScubaGear;

· tkol2022 opened on Sep 23, 2024