Network - 25398 - Domain controller RDP access is protected by phishing-resistant authentication through Global Secure Access

[Manoj-Kesana]

No description provided.

[Copilot]

Pull request overview

Adds a new Network assessment (25398) to evaluate whether Entra Private Access (Global Secure Access) RDP access to domain controllers is protected by Conditional Access requiring phishing-resistant authentication.

Changes:

• Introduces a new PowerShell test (25398) that discovers Private Access apps/segments with RDP (3389) and correlates them with CA policies requiring “Phishing-resistant MFA”.
• Generates markdown reporting tables for identified DC-like hosts, RDP apps, and relevant CA policies.
• Adds the corresponding remediation documentation markdown page for assessment 25398.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 5 comments.

File	Description
src/powershell/tests/Test-Assessment.25398.ps1	New assessment logic to discover Private Access RDP exposure and evaluate CA phishing-resistant auth coverage, plus report generation.
src/powershell/tests/Test-Assessment.25398.md	New assessment documentation describing risk and remediation steps with a results placeholder.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

@Manoj-Kesana I've opened a new pull request, #900, to work on those changes. Once the pull request is ready, I'll request review from you.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[alexandair]

@Manoj-Kesana Please, address my feedback.

[alexandair]

LGTM