alaanasser00/entraid-bench ? reverse-engineered prompt

Build me a PowerShell tool that checks the security of a Microsoft Entra ID tenant using the Microsoft Graph API.

I want it to run from one main script, look through a set of common security controls, and tell me if the tenant is following the CIS Microsoft 365 Foundations Benchmark. It should check things like MFA, banned passwords, conditional access, admin consent, guest access, risky sign in settings, and other Entra ID security basics.

Please make the results easy to read in the console and also export them to CSV so I can share them or review them later. Keep it modular so I can add or remove checks easily, and make sure it works with PowerShell 5.1 or newer. If you need to look up current Microsoft Graph docs online while building it, go ahead.