Checks/check-ORCA122.ps1
|
using module "..\ORCA.psm1" class ORCA122 : ORCACheck { <# CONSTRUCTOR with Check Header Data #> ORCA122() { $this.Control=122 $this.Area="Tenant Settings" $this.Name="Unified Audit Log" $this.PassText="Unified Audit Log is enabled" $this.FailRecommendation="Enable the Unified Audit Log" $this.Importance="The Unified Audit Log collects logs from most Office 365 services and provides one central place to correlate and pull logs from Office 365." } <# RESULTS #> GetResults($Config) { If($Config["AdminAuditLogConfig"].UnifiedAuditLogIngestionEnabled -eq $false) { # Check objects $ConfigObject = [ORCACheckConfig]::new() $ConfigObject.ConfigItem="UnifiedAuditLogIngestionEnabled" $ConfigObject.ConfigData=$Config["AdminAuditLogConfig"].UnifiedAuditLogIngestionEnabled $ConfigObject.SetResult([ORCAConfigLevel]::Standard,"Fail") $this.AddConfig($ConfigObject) } } } |