[THEME] Onboarding
The Onboarding theme ensures that Attic has the necessary access and information to properly protect your Microsoft 365 environment.
What does Attic do?
During onboarding, Attic verifies that all required connections and permissions are in place. This includes access to Exchange Online, Azure AD, licensing information, and other essential services. Attic also gathers baseline information about your tenant configuration.
The checks in this theme verify:
- Exchange Online and Azure AD connectivity
- License inventory and Secure Score baseline
- Directory synchronization and on-premises Exchange status
- Named locations and Conditional Access Policy configuration
- MFA status across all users and administrators
- SharePoint URL configuration
Why is this important?
A solid onboarding ensures that all subsequent security checks and monitoring can function correctly. Without proper access and baseline data, Attic cannot effectively protect your environment. The onboarding phase establishes the foundation for all other security themes.
Checks in this theme
| ID | Check |
|---|---|
| CHK-1010 | List inactive accounts |
| CHK-1132 | Users without MFA |
| CHK-1105 | get a list of admins (non pim) |
| CHK-1106 | retrieve a list of administrators (with pim) |
| CHK-1167 | Security Defaults enabled but you have a premium license |
| CHK-1338 | SecureScore statistics |
| CHK-1034 | MX-records |
| CHK-1921 | MFA all users via conditional access |
| CHK-1923 | SecureScore - MFA |
| CHK-1926 | Directory Synchronization |
| CHK-1927 | Exchange on-premise |
| CHK-1500 | Check SharePoint Url |
| CHK-1009 | Organization Customization |
| CHK-1000 | Exchange Online Access |
| CHK-1100 | EntraID Access |
| CHK-1101 | Count licensed users |
| CHK-1107 | Check ATTIC Named Location |
| CHK-1108 | Unmanaged Attic named location |
| CHK-1112 | Attic Monthly Report |
| CHK-1114 | Conditional Access Policies |