Network-25419: Network access activity is visible to security operations for threat detection and response

[sandeepjha000]

adding test 25419

[Copilot]

Pull request overview

This pull request adds a new security assessment test (Test-Assessment.25419) to verify that Global Secure Access logs are properly integrated with a Log Analytics workspace for Microsoft Sentinel threat detection and security operations visibility.

Changes:

• Added PowerShell test script to check if all six required Global Secure Access log categories are configured and sent to a Log Analytics workspace
• Added markdown documentation explaining the security risk and remediation steps for missing log integration

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
src/powershell/tests/Test-Assessment.25419.ps1	Implements test logic to query Azure diagnostic settings for Microsoft Entra, verify all six Global Secure Access log categories are enabled, and validate they're sent to a Log Analytics workspace
src/powershell/tests/Test-Assessment.25419.md	Documents the security implications of missing log integration and provides remediation steps with links to Microsoft documentation

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[alexandair]

@sandeepjha000 Please, address my feedback.

[alexandair]

LGTM