Microsoft Dynamics 365 | Integration, Dataverse...

Penetration Testing for Dynamics 365 (CRM)

(1) Share

Report

Posted on by Community Member

Hello Community,

When it comes to performing "penetration testing" related to security for Dynamics 365 (CRM), are there good recommended best practices, methodologies or tools that we could use to conduct such testing?

If anyone has any relevant experience and could share some insights and pointers, that would be greatly appreciated!

Thank you!

I have the same question (0)

All responses (6)

Answers (0)

LeoAlt 16,331 Moderator on at

Like (0)

Report
Copy link

Link copied!

Hi partner,

Please refer to the following links.

https://www.microsoft.com/en-us/msrc/pentest-rules-of-engagement

https://servicetrust.microsoft.com/ViewPage/TrustDocuments

https://gallery.technet.microsoft.com/Cloud-Red-Teaming-b837392e

https://medium.com/tsscyber/xss-in-dynamics-365-25c800aac473

https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-penetration-tests-red-team-exercises

I don't find other ways to do pen test in D365, you could raise an idea to Microsoft about this.

Regards,

Leo

Was this reply helpful? Yes No
Pankaj Gogoi 3,177 on at

Like (0)

Report
Copy link

Link copied!

Hi Eric,

Apart from the shared links, you can refer these as well.

https://docs.microsoft.com/en-in/dynamics365/get-started/gdpr/

https://docs.microsoft.com/en-us/azure/security/fundamentals/best-practices-and-patterns

Hope this helps

Best Regards

PG

Was this reply helpful? Yes No
Suggested answer

Roma Gupta 725 on at

Like (0)

Report
Copy link

Link copied!

Hi D365 Eric

Leo & Pankaj have covered almost all the major links.

Since Dynamics 365 is on Azure AD, I am referring to one of the white paper as well.

azure.microsoft.com/.../

Hope this helps.

Regards

Roma

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

Thanks everyone for all the pointers above!

Was this reply helpful? Yes No
fields 5 on at

Like (0)

Report
Copy link

Link copied!

I used the service of a cyber security company for not having such experience

Was this reply helpful? Yes No
Samnoliver 2 on at

Like (0)

Report
Copy link

Link copied!

When it comes to performing penetration testing for Dynamics 365 (CRM), it's crucial to follow best practices to ensure the security of your system. Some recommended methodologies include OWASP's Web Application Penetration Testing guidelines and NIST's framework for security testing. For tools, you can consider using open-source options like OWASP ZAP, Burp Suite, or commercial solutions like Nessus or Qualys for vulnerability scanning. Remember to obtain proper authorization before conducting any testing to avoid legal issues.
Also, you can try using IP Stresser & IP Booter services. Focus on ethical testing methods to strengthen your system's security.

Was this reply helpful? Yes No