ScubaGear is a configuration assessment tool that evaluates Microsoft 365 tenant environments against CISA Secure Cloud Business Applications (SCuBA) Security Configuration Baseline documents. The tool operates through a three-step process: - Uses PowerShell to query Microsoft 365 APIs and collect configuration settings from various M365 products - Employs Open Policy Agent (OPA) with Rego security policies to compare collected settings against established baseline requirements - Generates comprehensive reports in HTML, JSON, and CSV formats to present assessment results ScubaGear is designed for M365 administrators who need to verify their tenant configurations comply with security baselines. The tool can be installed from PSGallery and requires specific dependencies and permissions to access M365 APIs. The assessment tool supports evaluation of multiple Microsoft 365 products and services. It can be executed with command-line parameters or through configuration files for customized assessments. ScubaGear includes troubleshooting capabilities for common issues related to multi-tenant environments, Microsoft Defender, Exchange Online, Power Platform, Microsoft Graph connectivity, and proxy configurations.