SCuBA M365 Security Baseline Assessment Tool (CISA) (github.com)

The draft documents are at https://www.cisa.gov/scuba. They also include Azure AD and M365 Defender