AzureAnalyzer

Unified Azure assessment tool bundling azqr, PSRule for Azure, AzGovViz, ALZ Resource Graph queries, WARA, Maester, and OpenSSF Scorecard. Local module for on-demand assessment runs.

Minimum PowerShell version

7.4

Installation Options

Owners

• martinopedal

Package Details

FileList

• AzureAnalyzer.nuspec
• AzureAnalyzer.psd1
• AzureAnalyzer.psm1
• CHANGELOG.md
• Invoke-AzureAnalyzer.ps1
• LICENSE
• New-HtmlReport.ps1
• New-MdReport.ps1
• README.md
• modules\Invoke-ADOPipelineCorrelator.ps1
• modules\Invoke-ADOPipelineSecurity.ps1
• modules\Invoke-ADORepoSecrets.ps1
• modules\Invoke-ADOServiceConnections.ps1
• modules\Invoke-AdoConsumption.ps1
• modules\Invoke-AksKarpenterCost.ps1
• modules\Invoke-AksRightsizing.ps1
• modules\Invoke-AlzQueries.ps1
• modules\Invoke-AppInsights.ps1
• modules\Invoke-AzGovViz.ps1
• modules\Invoke-Azqr.ps1
• modules\Invoke-AzureCost.ps1
• modules\Invoke-AzureLoadTesting.ps1
• modules\Invoke-AzureQuotaReports.ps1
• modules\Invoke-ConditionalAccessGraph.ps1
• modules\Invoke-CopilotTriage.ps1
• modules\Invoke-CopilotTriage.py
• modules\Invoke-DefenderForCloud.ps1
• modules\Invoke-DnsTwist.ps1
• modules\Invoke-Falco.ps1
• modules\Invoke-FinOpsSignals.ps1
• modules\Invoke-GhActionsBilling.ps1
• modules\Invoke-Gitleaks.ps1
• modules\Invoke-IaCBicep.ps1
• modules\Invoke-IaCTerraform.ps1
• modules\Invoke-IdentityCorrelator.ps1
• modules\Invoke-IdentityGraphExpansion.ps1
• modules\Invoke-Infracost.ps1
• modules\Invoke-KubeBench.ps1
• modules\Invoke-Kubescape.ps1
• modules\Invoke-Maester.ps1
• modules\Invoke-PSRule.ps1
• modules\Invoke-Powerpipe.ps1
• modules\Invoke-Prowler.ps1
• modules\Invoke-Scorecard.ps1
• modules\Invoke-SentinelCoverage.ps1
• modules\Invoke-SentinelIncidents.ps1
• modules\Invoke-Trivy.ps1
• modules\Invoke-WARA.ps1
• modules\Invoke-Zizmor.ps1
• modules\iac\IaCAdapters.ps1
• modules\normalizers\Normalize-ADOConnections.ps1
• modules\normalizers\Normalize-ADOPipelineCorrelator.ps1
• modules\normalizers\Normalize-ADOPipelineSecurity.ps1
• modules\normalizers\Normalize-ADORepoSecrets.ps1
• modules\normalizers\Normalize-AdoConsumption.ps1
• modules\normalizers\Normalize-AksKarpenterCost.ps1
• modules\normalizers\Normalize-AksRightsizing.ps1
• modules\normalizers\Normalize-AlzQueries.ps1
• modules\normalizers\Normalize-AppInsights.ps1
• modules\normalizers\Normalize-AzGovViz.ps1
• modules\normalizers\Normalize-Azqr.ps1
• modules\normalizers\Normalize-AzureCost.ps1
• modules\normalizers\Normalize-AzureLoadTesting.ps1
• modules\normalizers\Normalize-AzureQuotaReports.ps1
• modules\normalizers\Normalize-ConditionalAccessGraph.ps1
• modules\normalizers\Normalize-DefenderForCloud.ps1
• modules\normalizers\Normalize-DnsTwist.ps1
• modules\normalizers\Normalize-Falco.ps1
• modules\normalizers\Normalize-FinOpsSignals.ps1
• modules\normalizers\Normalize-GhActionsBilling.ps1
• modules\normalizers\Normalize-Gitleaks.ps1
• modules\normalizers\Normalize-IaCBicep.ps1
• modules\normalizers\Normalize-IaCTerraform.ps1
• modules\normalizers\Normalize-IdentityCorrelation.ps1
• modules\normalizers\Normalize-IdentityGraphExpansion.ps1
• modules\normalizers\Normalize-Infracost.ps1
• modules\normalizers\Normalize-KubeBench.ps1
• modules\normalizers\Normalize-Kubescape.ps1
• modules\normalizers\Normalize-Maester.ps1
• modules\normalizers\Normalize-PSRule.ps1
• modules\normalizers\Normalize-Powerpipe.ps1
• modules\normalizers\Normalize-Prowler.ps1
• modules\normalizers\Normalize-Scorecard.ps1
• modules\normalizers\Normalize-SentinelCoverage.ps1
• modules\normalizers\Normalize-SentinelIncidents.ps1
• modules\normalizers\Normalize-Trivy.ps1
• modules\normalizers\Normalize-WARA.ps1
• modules\normalizers\Normalize-Zizmor.ps1
• modules\reports\New-DriftReport.ps1
• modules\shared\AksDiscovery.ps1
• modules\shared\AuditorReportBuilder.ps1
• modules\shared\Banner.ps1
• modules\shared\Build-CopilotTriagePlan.ps1
• modules\shared\Canonicalize.ps1
• modules\shared\Checkpoint.ps1
• modules\shared\CliTimeout.ps1
• modules\shared\Compare-EntitySnapshots.ps1
• modules\shared\DnsTwistHelpers.ps1
• modules\shared\EasmCorrelator.ps1
• modules\shared\EasmSeed.ps1
• modules\shared\EntityStore.ps1
• modules\shared\Errors.ps1
• modules\shared\ExecDashboardRender.ps1
• modules\shared\FrameworkMapper.ps1
• modules\shared\FunctionCollision.ps1
• modules\shared\Get-CopilotReviewFindings.ps1
• modules\shared\Get-NewCriticalFindings.ps1
• modules\shared\IdentityCorrelator.ps1
• modules\shared\Installer.ps1
• modules\shared\Invoke-PRAdvisoryGate.ps1
• modules\shared\Invoke-PRReviewGate.ps1
• modules\shared\KqlQuery.ps1
• modules\shared\KubeAuth.ps1
• modules\shared\Mask.ps1
• modules\shared\MissingTool.ps1
• modules\shared\MissingToolTestHarness.ps1
• modules\shared\MultiTenantOrchestrator.ps1
• modules\shared\New-WrapperEnvelope.ps1
• modules\shared\Policy\AlzMatcher.ps1
• modules\shared\Policy\AzAdvertizerLookup.ps1
• modules\shared\Policy\PolicyEnforcementRenderer.ps1
• modules\shared\Policy\catalogs\alz-policy-catalog.json
• modules\shared\Policy\catalogs\alz-vintage.json
• modules\shared\Policy\catalogs\azadvertizer-catalog.json
• modules\shared\Policy\finding-to-policy-map.json
• modules\shared\Preflight\Get-RequiredInputs.ps1
• modules\shared\PromptForMandatoryParams.ps1
• modules\shared\RateLimit.ps1
• modules\shared\RbacTier.ps1
• modules\shared\RemoteClone.ps1
• modules\shared\Renderers\AttackPathRenderer.ps1
• modules\shared\Renderers\ResilienceMapRenderer.ps1
• modules\shared\ReportDelta.ps1
• modules\shared\ReportManifest.ps1
• modules\shared\ReportVerification.ps1
• modules\shared\Resolve-PRReviewThreads.ps1
• modules\shared\Retry.ps1
• modules\shared\RubberDuckChain.ps1
• modules\shared\RunHistory.ps1
• modules\shared\Sanitize.ps1
• modules\shared\ScanState.ps1
• modules\shared\Schema.ps1
• modules\shared\Triage\Invoke-CopilotTriage.ps1
• modules\shared\Viewer.ps1
• modules\shared\WorkerPool.ps1
• modules\sinks\Send-FindingsToLogAnalytics.ps1
• queries\README.md
• queries\alz\alz_additional_queries.json
• queries\finops\finops-empty-resource-groups.json
• queries\finops\finops-idle-app-service-plans.json
• queries\finops\finops-idle-network-controls.json
• queries\finops\finops-stopped-vms.json
• queries\finops\finops-unattached-managed-disks.json
• queries\finops\finops-ungoverned-snapshots.json
• queries\finops\finops-unused-public-ips.json
• queries\library\README.md
• queries\library\aks-rightsizing-missing-hpa.json
• queries\library\aks-rightsizing-oomkilled.json
• queries\library\aks-rightsizing-over-provisioned.json
• queries\library\aks-rightsizing-under-provisioned.json
• queries\library\appinsights-dependency-failures.json
• queries\library\appinsights-exception-rate.json
• queries\library\appinsights-slow-requests.json
• scripts\Backfill-ChangelogCitations.ps1
• scripts\Check-StubDeadline.ps1
• scripts\Generate-PermissionsIndex.ps1
• scripts\Generate-ReadmeFacts.ps1
• scripts\Generate-ToolCatalog.ps1
• scripts\Regenerate-Samples.ps1
• scripts\Resolve-CommonMergeConflicts.ps1
• scripts\Sanitize-CiOutput.ps1
• scripts\Sync-AlzQueries.ps1
• scripts\audit-tool-fields.ps1
• scripts\render-tool-output-audit.ps1
• templates\azure-analyzer-scheduled.yml
• templates\gitleaks-ado-allowlist.toml
• tools\tool-manifest.json

Version History