Network - 25420 - Network access logs are retained for security analysis and compliance requirements

[aahmed-spec]

No description provided.

[Copilot]

Pull request overview

This PR adds a new assessment test (Test-Assessment.25420) to validate that Global Secure Access network logs are retained for at least 90 days to support security analysis and compliance requirements. The test checks Microsoft Entra diagnostic settings to ensure required log categories are enabled with adequate retention configured in Log Analytics workspaces or storage accounts.

Changes:

• Implements comprehensive validation of diagnostic settings for four required Global Secure Access log categories
• Evaluates retention periods across Log Analytics workspaces and storage account destinations
• Generates detailed reports showing log category status, destination details, and retention metrics

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
src/powershell/tests/Test-Assessment.25420.ps1	New PowerShell test function that queries Azure diagnostic settings and workspace retention, evaluates compliance with 90-day minimum retention requirement, and generates detailed markdown reports
src/powershell/tests/Test-Assessment.25420.md	Documentation file explaining the security risk of inadequate log retention and providing remediation guidance with links to configure diagnostic settings and workspace retention

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 7 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[alexandair]

@aahmed-spec Please, address my feedback.

made changes to the code as per the changes requested