Test catalog
Every check Maester runs, from Maester’s own suites and the packs that ship with it. See what each product covers, which framework requirements have a check, and which attack techniques the checks defend against.
Checks1,254890 built in, 364 in ZTANew in the preview194Built-in checks not in the stable releaseProducts14Entra ID, Active Directory, Defender and moreATT&CK techniques149829 checks mapped, ATT&CK 19.2
By product and security area
| Product | Infra | Auth | Access | Privileged | Devices | External | Apps | Logging | Data | AI | Lifecycle | DevOps | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
 Entra ID | 18 | 115 | 1 | 74 | 82 | 4 | 26 | 63 | 13 | 1 | 22 | 10 | – |
 Active Directory | 147 | 41 | – | 27 | 21 | 2 | 12 | 3 | 2 | – | – | 20 | – |
 Defender | – | – | 94 | – | 4 | 35 | – | 3 | 15 | – | – | – | – |
 Intune | – | 3 | – | 8 | 10 | 73 | – | – | 1 | 7 | – | – | – |
 Exchange Online | 1 | 4 | 36 | – | – | – | 5 | 2 | 8 | 5 | – | – | – |
 Azure | 24 | – | – | 1 | 4 | – | – | – | 29 | 1 | – | – | – |
 Purview | – | – | – | – | – | – | – | – | 6 | 40 | – | – | – |
 Azure DevOps | – | 8 | – | 4 | 2 | – | 3 | 1 | 2 | – | 1 | – | 25 |
 Teams | – | – | 3 | – | – | – | 18 | 1 | – | 1 | – | – | – |
 SharePoint | – | 3 | 1 | 4 | – | – | 12 | – | – | – | – | – | – |
 Microsoft 365 | 1 | 2 | 1 | 3 | 3 | – | 3 | 1 | – | – | 1 | – | – |
 Microsoft Fabric | 1 | 1 | – | 1 | – | – | 5 | 3 | – | 1 | – | – | – |
 Copilot Studio | – | – | – | – | – | – | – | – | – | – | 10 | – | – |
 GitHub | – | – | – | 5 | – | – | – | – | – | – | – | – | – |
Darker means more checks. Choose a cell to list its checks.
Framework coverage
NIST SP 800-53 r5522 checksCIS Microsoft 365144 of 144CIS GitHub5 checksCISA SCuBA76 of 79Essential Eight14 of 126ASD ISM14 checksRequirements with at least one Maester check. Some cannot be checked from a tenant, such as patching servers.