8 pages in this section, in the order they are meant to be read.

Install

What this needs on a machine, and how to know it worked.

  1. 01
    Install

    What do I actually need on this machine, and how do I know it worked?

See it work

A first assessment offline, against packaged evidence. No tenant.

  1. 01
    See it work

    I have installed it. What do I run, in what order, and what am I looking at?

Connect

What an identity needs to reach a tenant, and why it is required.

  1. 01
    Connect

    Why does it insist on a client id, and what identity should I give it?

Collect

Reaching a tenant, read only, and writing down what was there.

  1. 01
    Collect

    I have an app registration. How do I collect, and what do I get?

Assess

Turning evidence into findings somebody can argue with.

  1. 01
    Assess

    I have evidence. How do I get an answer, and what is that answer worth?

Inspect

Reading what came back, and what each line commits to.

  1. 01
    Inspect

    A report just landed on my desk. What am I looking at, from the top?

Compare

What changed between two assessments, and what it does not say.

  1. 01
    Compare

    Something moved. Did the tenant change, or did the rule?

Verify

Establishing a document somebody else produced.

  1. 01
    Verify

    How do I establish that it holds, without their engine and without trusting them?

All documentation