Devolutions.CIEM
0.2.114
Cloud Infrastructure Entitlement Management (CIEM) for PowerShell Universal. Detects dormant permissions, right-sizes roles, maps identity-to-resource relationships, and surfaces attack paths across Azure and AWS.
Minimum PowerShell version
7.4
Installation Options
Owners
Copyright
(c) Devolutions Inc. All rights reserved.
Package Details
Author(s)
- Adam Bertram
Tags
CIEM Cloud Identities Security Azure AWS PowerShellUniversal IAM RBAC
PSEditions
Dependencies
This module has no dependencies.
FileList
- Devolutions.CIEM.nuspec
- modules\Azure\Discovery\Public\Update-CIEMAzureDiscoveryScheduleStatus.ps1
- modules\Azure\Discovery\Private\InvokeCIEMDiscoveryPhase.ps1
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\package.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-sql-server.svg
- setup.ps1
- Public\Connect-CIEM.ps1
- modules\Devolutions.CIEM.Notifications\Private\SendCIEMEmailMessage.ps1
- modules\Devolutions.CIEM.Graph\Private\InvokeCIEMAttackPathEvaluation.ps1
- modules\Azure\Checks\Test-EntraConditionalAccessPolicyRequireMfaForManagementApi.ps1
- modules\Devolutions.CIEM.Checks\Private\GetCIEMEntraNeeds.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-CIEMRelationshipColor.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\dormant-identity-with-privileged-subscription-level-role.ps1
- modules\Azure\Discovery\Public\New-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\InvokeCIEMEntraEntityCollection.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-organizations.svg
- Public\Set-CIEMConfig.ps1
- modules\Devolutions.CIEM.Notifications\Private\ConvertFromCIEMNotificationJsonArray.ps1
- modules\Devolutions.CIEM.Graph\Private\UpdateCIEMAttackPathStorageSchema.ps1
- modules\Azure\Checks\Test-EntraPolicyGuestInviteOnlyForAdminRole.ps1
- modules\Devolutions.CIEM.Checks\Private\ConvertFromCIEMStoredResource.ps1
- modules\Devolutions.CIEM.PSU\Public\Invoke-CIEMJobWithProgress.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\internet-exposed-vm-with-managed-identity-accessing-key-vault.ps1
- modules\Azure\Discovery\Public\Get-CIEMAzureDiscoveryPhaseMetric.ps1
- modules\Azure\Discovery\Private\ConvertCIEMAzureEntityRow.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resource-icon-map.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-user.svg
- Devolutions.CIEM.psm1
- Public\Reset-CIEMConfig.ps1
- modules\Devolutions.CIEM.Notifications\Private\ConvertToCIEMNotificationJson.ps1
- modules\Devolutions.CIEM.Graph\Private\ConvertCIEMExposureSeverity.ps1
- modules\Azure\Checks\Test-EntraSecurityDefaultsEnabled.ps1
- modules\Devolutions.CIEM.Checks\Private\UpdateCIEMCheckStorageSchema.ps1
- modules\Devolutions.CIEM.PSU\Public\Resolve-CIEMResourceIconDataUri.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\guest-user-is-a-member-of-a-group-that-holds-a-privileged-role.ps1
- modules\Azure\Discovery\Public\Get-CIEMAzureDiscoverySchedule.ps1
- modules\Azure\Discovery\Private\InvokeCIEMEntraPermissionCollection.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\README.md
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-key-vault.svg
- Devolutions.CIEM.psd1
- Public\Save-CIEMAuthenticationProfile.ps1
- modules\Devolutions.CIEM.Notifications\Private\GetCIEMNotificationSeverityRank.ps1
- modules\Devolutions.CIEM.Graph\Private\RemoveCIEMGraphEntity.ps1
- modules\Azure\Checks\Test-EntraPolicyGuestUserAccessRestriction.ps1
- modules\Devolutions.CIEM.Checks\Private\SyncCIEMCheckCatalog.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMEnvironmentTree.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\management-port-open-to-the-internet.ps1
- modules\Azure\Discovery\Public\Update-CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Private\ResolveCIEMNodeKind.ps1
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\dist\index.bundle.js
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-static-web-app.svg
- README.md
- Public\Remove-CIEMAuthenticationProfile.ps1
- modules\Devolutions.CIEM.Notifications\Private\SaveCIEMNotificationHistory.ps1
- modules\Devolutions.CIEM.Graph\Private\ResolveCIEMAttackPathRemediationScript.ps1
- modules\Azure\Checks\Test-EntraUserWithVmAccessHasMfa.ps1
- modules\Devolutions.CIEM.Checks\Private\GetCIEMCheckCatalog.ps1
- modules\Devolutions.CIEM.PSU\Public\New-DevolutionsCIEMApp.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\disabled-account-still-holding-active-role-assignments.ps1
- modules\Azure\Discovery\Public\Save-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\SaveCIEMAzureTable.ps1
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\scripts\build.js
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-iam-role.svg
- Public\Get-CIEMProviderAuthMethod.ps1
- modules\Devolutions.CIEM.Graph\Classes\CIEMAttackPath.ps1
- modules\Devolutions.CIEM.Graph\Private\TestCIEMAttackPathContainsPrincipal.ps1
- modules\Azure\Checks\check_catalog.json
- modules\Devolutions.CIEM.Checks\Private\GetCIEMIAMNeeds.ps1
- modules\Devolutions.CIEM.PSU\Private\GetCIEMPSUPageRegistry.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\internet-exposed-vm-with-privileged-managed-identity.ps1
- modules\Azure\Discovery\Public\Update-CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Private\InvokeCIEMEntraRelationshipCollection.ps1
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\src\ciem-environment-tree.js
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-vpc.svg
- Classes\CIEMAuthenticationContext.ps1
- Public\Get-CIEMAuthenticationProfileAssignment.ps1
- modules\Devolutions.CIEM.Graph\Classes\CIEMGraphNode.ps1
- modules\Devolutions.CIEM.Graph\Private\ResolveCIEMAttackPathFilter.ps1
- modules\Azure\Checks\Test-EntraPolicyDefaultUserCannotCreateSecurityGroup.ps1
- modules\Devolutions.CIEM.Checks\Private\InvokeCIEMCheck.ps1
- modules\Devolutions.CIEM.PSU\Private\RegisterCIEMEnvironmentTreeAsset.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\vm-with-managed-identity-holding-a-privileged-subscription-role.ps1
- modules\Azure\Discovery\Public\Save-CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Private\ResolveCIEMScopeLabel.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-resource-group.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-network-security-group.svg
- Classes\CIEMProvider.ps1
- Private\GetCIEMAuthenticationProfileOwnedSecretName.ps1
- modules\Devolutions.CIEM.Graph\Classes\CIEMAttackPathRule.ps1
- modules\Devolutions.CIEM.Graph\Private\GetCIEMGraphEntityConfig.ps1
- modules\Azure\Checks\Test-EntraTrustedNamedLocationExist.ps1
- modules\Devolutions.CIEM.Checks\Private\TestEntraAuthorizationPolicyBooleanSetting.ps1
- modules\Devolutions.CIEM.PSU\Data\severity_catalog.json
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\identity-inherits-privileged-role-through-group-membership.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Private\ResolveCIEMManagedIdentityHost.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-virtual-machine.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-subscription.svg
- Checks\Invoke-CIEMAttackPathRemediation.ps1
- Private\ReadPSUCache.ps1
- modules\Devolutions.CIEM.Graph\Classes\CIEMGraphEdge.ps1
- modules\Devolutions.CIEM.Graph\Private\GetCIEMGraphEntity.ps1
- modules\Azure\Checks\Test-EntraPolicyRestrictUserConsentForApp.ps1
- modules\Devolutions.CIEM.Checks\Private\InvokeCIEMScan.ps1
- modules\Devolutions.CIEM.PSU\Data\status_catalog.json
- modules\Azure\Discovery\Classes\CIEMAzureResourceType.ps1
- modules\Azure\Discovery\Public\Get-CIEMAzureIdentityHierarchy.ps1
- modules\Azure\Discovery\Private\InvokeCIEMGraphEdgeBuild.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-kms.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-cloud.svg
- Checks\Start-CIEMAzureDiscovery.ps1
- Private\GetCIEMAuthenticationProfileFieldSchema.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMAttackPathRemediationScript.ps1
- modules\Devolutions.CIEM.Graph\Private\ConvertFromCIEMAttackPathRow.ps1
- modules\Devolutions.CIEM.Checks\Classes\CIEMProviderService.ps1
- modules\Devolutions.CIEM.Checks\Private\SetCIEMCheckState.ps1
- modules\Devolutions.CIEM.PSU\Data\pages.json
- modules\Azure\Discovery\Classes\CIEMAzureDiscoveryCoverageReport.ps1
- modules\Azure\Discovery\Public\Get-CIEMAzureArmHierarchy.ps1
- modules\Azure\Discovery\Private\InvokeCIEMAzureEffectiveRoleAssignmentBuild.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-vm-extension.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-app-service.svg
- Checks\New-CIEMScanRun.ps1
- Private\GetCIEMAssignedAuthenticationProfile.ps1
- modules\Devolutions.CIEM.Graph\Public\Remove-CIEMGraphEdge.ps1
- modules\Devolutions.CIEM.Graph\Private\UpdateCIEMExposureChangeStorageSchema.ps1
- modules\Devolutions.CIEM.Checks\Classes\CIEMScanResult.ps1
- modules\Devolutions.CIEM.Checks\Data\remediation-permissions.json
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMAboutPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\NewCIEMAzureResourceType.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-custom-api.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-log-analytics-workspace.svg
- .universal\dashboards.ps1
- Private\ConvertToCIEMProvider.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMIdentityRiskSignals.ps1
- modules\Devolutions.CIEM.Graph\Data\remediation_tokens.psdata
- modules\Devolutions.CIEM.Checks\Classes\CIEMServiceCache.ps1
- modules\AWS\Checks\Test-IamNoRootAccessKey.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMScanHistoryPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Public\New-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\RemoveCIEMAzureResourceType.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-alert.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-role-assignment.svg
- .universal\scripts.ps1
- Private\ConvertFromCIEMAuthenticationProfileJson.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMExposureChange.ps1
- modules\Devolutions.CIEM.Graph\Data\graph_schema.sql
- modules\Devolutions.CIEM.Checks\Classes\CIEMCheck.ps1
- modules\AWS\Checks\Test-IamRootMfaEnabled.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMDashboardPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\ResolveCIEMResourceTypeMetadata.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-role-definition.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-rds.svg
- Public\Update-CIEMProvider.ps1
- Private\ConvertToCIEMAuthenticationProfileJson.ps1
- modules\Devolutions.CIEM.Graph\Public\Save-CIEMGraphNode.ps1
- modules\Devolutions.CIEM.Graph\Data\entities.psdata
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMScanEfficiencySummary.ps1
- modules\AWS\Checks\Test-IamUserMfaEnabledConsoleAccess.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMScanPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Public\Set-CIEMAzureDiscoverySchedule.ps1
- modules\Azure\Discovery\Private\InvokeCIEMArmHierarchyBuild.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-management-group.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-iam-identity-center.svg
- Public\New-CIEMProvider.ps1
- Private\InvokeCIEMTransaction.ps1
- modules\Devolutions.CIEM.Graph\Public\Compare-CIEMExposureSnapshot.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_script_template.ps1
- modules\Devolutions.CIEM.Checks\Public\Disable-CIEMCheck.ps1
- modules\AWS\Checks\Test-IamPasswordPolicyLowercase.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMAttackPathPatternsPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Public\Update-CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Data\entities.psdata
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-resource-mover.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-users.svg
- Public\Get-CIEMResourceType.ps1
- Private\RegisterCIEMArgumentCompleters.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMConnectorPayloadPreview.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Classes\CIEMEffectivePermission.ps1
- modules\Devolutions.CIEM.Checks\Public\Save-CIEMScanResult.ps1
- modules\AWS\Checks\check_catalog.json
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMAttackPathsPage.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Private\UpdateCIEMAzureResourceType.ps1
- modules\Azure\Discovery\Data\discovery_phases.psdata
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-network-interface.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-app-service-slot.svg
- Public\Get-CIEMIdentity.ps1
- Private\TestCIEMAuthenticationProfileInput.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMGraphPath.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Public\Get-CIEMEffectivePermission.ps1
- modules\Devolutions.CIEM.Checks\Public\Remove-CIEMCheck.ps1
- modules\PSUSQLite\Public\Open-PSUSQLiteConnection.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMEnvironmentPage.ps1
- modules\Azure\Discovery\Public\Get-CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Private\InvokeCIEMGraphNodeBuild.ps1
- modules\Azure\Discovery\Data\privileged_roles.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-public-ip-address.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-network-watcher.svg
- Public\Get-CIEMAuthenticationProfileFieldSchema.ps1
- data\authentication_profile_field_schema.json
- modules\Devolutions.CIEM.Graph\Public\Invoke-CIEMAttackPathRemediation.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Public\Get-CIEMIdentityAccessSummary.ps1
- modules\Devolutions.CIEM.Checks\Public\Save-CIEMCheck.ps1
- modules\PSUSQLite\Public\Invoke-PSUSQLiteQuery.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMIdentitiesPage.ps1
- modules\Azure\Discovery\Public\Update-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\TestCIEMAzurePrivilegedRole.ps1
- modules\Azure\Discovery\Data\discovery_schema.sql
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-account.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-application-insights.svg
- Public\Get-CIEMAuthenticationProfile.ps1
- data\psu-scripts.json
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMGraphEdge.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ResolveCIEMAzureEffectivePermission.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMRequiredPermission.ps1
- modules\PSUSQLite\Private\Resolve-PSUSQLiteAssembly.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMNavigation.ps1
- modules\Azure\Discovery\Public\New-CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Private\InvokeCIEMIdentityHierarchyBuild.ps1
- modules\Azure\Discovery\Data\discovery_coverage_areas.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-storage-account.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-lambda.svg
- Public\Remove-CIEMSecret.ps1
- data\schema.sql
- modules\Devolutions.CIEM.Graph\Public\Save-CIEMExposureSnapshot.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ConvertCIEMEffectivePermissionAction.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMCheckMetadata.ps1
- modules\Devolutions.CIEM.Reports\Classes\CIEMReport.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMReportsPage.ps1
- modules\Azure\Discovery\Public\New-CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Private\InvokeCIEMBatchInsert.ps1
- modules\Azure\Discovery\Data\graph_kind_map.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-id.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-cognitive-services.svg
- Public\Get-CIEMProvider.ps1
- data\relationship_colors.json
- modules\Devolutions.CIEM.Graph\Public\Update-CIEMAttackPath.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ResolveCIEMEffectivePermissionActionDescription.ps1
- modules\Devolutions.CIEM.Checks\Public\New-CIEMScanResult.ps1
- modules\Devolutions.CIEM.Reports\Classes\CIEMReportResult.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMAuthenticationProfilesPage.ps1
- modules\Azure\Discovery\Public\Save-CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Private\GetCIEMAzureEntityConfig.ps1
- modules\Azure\Infrastructure\Classes\CIEMAzureProviderApi.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-app-service-certificate.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-virtual-network.svg
- Public\Get-CIEMDatabasePath.ps1
- data\module_roots.psdata
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMPAMProgressSummary.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ResolveCIEMPrincipalType.ps1
- modules\Devolutions.CIEM.Checks\Public\Enable-CIEMCheck.ps1
- modules\Devolutions.CIEM.Reports\Public\Get-CIEMReport.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMConfigPage.ps1
- modules\Azure\Discovery\Public\Stop-CIEMAzureDiscovery.ps1
- modules\Azure\Discovery\Private\BuildCIEMEntraTransitiveMembership.ps1
- modules\Azure\Infrastructure\Classes\CIEMAzureAuthenticationContext.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-group.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-workload-id.svg
- Public\Invoke-CIEMQuery.ps1
- modules\PSUSQLite\PSUSQLite.psd1
- modules\Devolutions.CIEM.Graph\Public\Save-CIEMGraphEdge.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ResolveCIEMAwsEffectivePermission.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMProviderService.ps1
- modules\Devolutions.CIEM.Reports\Public\Invoke-CIEMReport.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\dormant-privileged-subscription-access.json
- modules\Azure\Discovery\Public\Save-CIEMAzureDiscoveryPhaseMetric.ps1
- modules\Azure\Discovery\Private\UpdateCIEMAzureEntity.ps1
- modules\Azure\Infrastructure\Public\Invoke-AzureApi.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-application.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-iam.svg
- Public\Import-CIEMScript.ps1
- modules\PSUSQLite\PSUSQLite.psm1
- modules\Devolutions.CIEM.Graph\Public\Sync-CIEMAttackPathRuleCatalog.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Data\effective_permission_descriptions.json
- modules\Devolutions.CIEM.Checks\Public\New-CIEMCheckMetadata.ps1
- modules\Devolutions.CIEM.Reports\Private\GetCIEMReportRegistry.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\guest-in-privileged-group.json
- modules\Azure\Discovery\Public\Get-CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Private\GetCIEMBuiltInRoleDefinitions.ps1
- modules\Azure\Infrastructure\Public\Connect-CIEMAzure.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-user.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-s3.svg
- Public\Get-CIEMSecret.ps1
- modules\Devolutions.CIEM.Notifications\Classes\CIEMNotificationChannel.ps1
- modules\Devolutions.CIEM.Graph\Public\Remove-CIEMGraphNode.ps1
- modules\Azure\Checks\Test-IamRoleUserAccessAdminRestricted.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMCheck.ps1
- modules\Devolutions.CIEM.Reports\Data\reports.json
- modules\Devolutions.CIEM.Graph\Data\attack_paths\public-vm-to-keyvault.json
- modules\Azure\Discovery\Public\Update-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\InvokeCIEMGraphComputedEdgeBuild.ps1
- modules\Azure\Infrastructure\Private\InvokeCIEMAzureSleep.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-ec2.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-dashboard.svg
- Public\Save-CIEMProvider.ps1
- modules\Devolutions.CIEM.Notifications\Classes\CIEMNotification.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMDashboardNeedsAttention.ps1
- modules\Azure\Checks\Test-EntraPolicyUserConsentForVerifiedApp.ps1
- modules\Devolutions.CIEM.Checks\Public\Update-CIEMScanRun.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-SeverityColor.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\open-management-port.json
- modules\Azure\Discovery\Public\Save-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\GetCIEMAzureDiscoveryPhaseConfig.ps1
- modules\Azure\Infrastructure\Private\InvokeCIEMParallelForEach.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-iam-permissions.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-secrets-manager.svg
- Public\Set-CIEMSecret.ps1
- modules\Devolutions.CIEM.Notifications\Public\Set-CIEMNotification.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMGraphNode.ps1
- modules\Azure\Checks\Test-EntraNonPrivilegedUserHasMfa.ps1
- modules\Devolutions.CIEM.Checks\Public\New-CIEMScanRun.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-PSUInstalledEnvironment.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\guest-user-with-privileged-role.json
- modules\Azure\Discovery\Public\Get-CIEMAzureResourceType.ps1
- modules\Azure\Discovery\Private\SaveCIEMAzureResourceType.ps1
- modules\Azure\Infrastructure\Private\InvokeAzureApiTransport.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-app-service-plan.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-disk.svg
- Public\Set-CIEMAuthenticationProfileAssignment.ps1
- modules\Devolutions.CIEM.Notifications\Public\Send-CIEMNotification.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMIdentityRiskSummary.ps1
- modules\Azure\Checks\Test-EntraPrivilegedUserHasMfa.ps1
- modules\Devolutions.CIEM.Checks\Public\Update-CIEMCheck.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMInfoContent.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\disabled-account-with-roles.json
- modules\Azure\Discovery\Public\Get-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\GetCIEMAzureDiscoveryCoverageReportData.ps1
- modules\Azure\Infrastructure\Private\GetCIEMAzureProviderApi.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-power-platform.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-ec2-instance.svg
- Public\Get-CIEMDefaultConfig.ps1
- modules\Devolutions.CIEM.Notifications\Public\Get-CIEMNotificationChannel.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMAttackPathPattern.ps1
- modules\Azure\Checks\Test-IamSubscriptionRolesOwnerCustomNotCreated.ps1
- modules\Devolutions.CIEM.Checks\Public\Remove-CIEMScanRun.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-CIEMSeverityRank.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\privileged-managed-identity-broad-scope.json
- modules\Azure\Discovery\Public\Get-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\RemoveCIEMAzureEntity.ps1
- modules\Azure\Infrastructure\Data\azure_schema.sql
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-s3-bucket.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-sql-database.svg
- Public\Remove-CIEMProvider.ps1
- modules\Devolutions.CIEM.Notifications\Public\Get-CIEMNotificationHistory.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMAttackPath.ps1
- modules\Azure\Checks\Test-EntraGlobalAdminCountWithinLimit.ps1
- modules\Devolutions.CIEM.Checks\Public\Remove-CIEMScanResult.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMErrorContent.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\group-inherited-privilege-escalation.json
- modules\Azure\Discovery\Public\Get-CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Private\InvokeCIEMResourceGraphQuery.ps1
- modules\AWS\Infrastructure\Public\Invoke-AWSAPI.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-logic-app.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-cloudwatch.svg
- Public\Write-CIEMLog.ps1
- modules\Devolutions.CIEM.Notifications\Public\Set-CIEMNotificationChannel.ps1
- modules\Devolutions.CIEM.Graph\Private\GetCIEMStoredAttackPath.ps1
- modules\Azure\Checks\Test-EntraPolicyEnsureDefaultUserCannotCreateTenant.ps1
- modules\Devolutions.CIEM.Checks\Public\Save-CIEMScanRun.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMSuccessContent.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\service-principal-owner-on-subscription.json
- modules\Azure\Discovery\Public\Start-CIEMAzureDiscovery.ps1
- modules\Azure\Discovery\Private\GetCIEMAzureEntity.ps1
- modules\AWS\Infrastructure\Public\Connect-CIEMAWS.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-scheduler.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-cloudtrail.svg
- Public\Get-CIEMPSUScriptDefinition.ps1
- modules\Devolutions.CIEM.Notifications\Public\Get-CIEMNotification.ps1
- modules\Devolutions.CIEM.Graph\Private\ConvertCIEMGraphEntityRow.ps1
- modules\Azure\Checks\Test-EntraUserCannotCreateMicrosoft365Group.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMScanResult.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-StatusColor.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\internet-exposed-privileged-mi.json
- modules\Azure\Discovery\Public\Save-CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Private\TestCIEMAzureDiscoveryPhaseRegistry.ps1
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\package-lock.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-managed-identity.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-service-principal.svg
- Public\New-CIEMDatabase.ps1
- modules\Devolutions.CIEM.Notifications\Private\FormatCIEMNotificationTemplate.ps1
- modules\Devolutions.CIEM.Graph\Private\GetCIEMAttackPatternDefinition.ps1
- modules\Azure\Checks\Test-EntraPolicyEnsureDefaultUserCannotCreateApp.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMScanRun.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-CIEMPSUJobOutput.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\guest-user-holding-a-privileged-role.ps1
- modules\Azure\Discovery\Public\New-CIEMAzureDiscoveryRun.ps1
- Public\Get-CIEMConfig.ps1
- modules\Devolutions.CIEM.Notifications\Private\ConvertFromCIEMNotificationJson.ps1
- modules\Devolutions.CIEM.Graph\Private\SaveCIEMGraphEntity.ps1
- modules\Azure\Checks\Test-IamCustomRoleHasPermissionToAdministerResourceLock.ps1
- modules\Devolutions.CIEM.Checks\Public\New-CIEMCheck.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMLastDiscoveryHeader.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\service-principal-holding-owner-role-on-a-subscription.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureResourceRelationship.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 0.2.122 | 0 | 5/15/2026 |
| 0.2.121 | 2 | 5/15/2026 |
| 0.2.120 | 2 | 5/15/2026 |
| 0.2.119 | 2 | 5/15/2026 |
| 0.2.118 | 3 | 5/15/2026 |
| 0.2.117 | 2 | 5/15/2026 |
| 0.2.116 | 2 | 5/15/2026 |
| 0.2.115 | 2 | 5/15/2026 |
| 0.2.114 (current version) | 2 | 5/15/2026 |
| 0.2.113 | 3 | 5/15/2026 |
| 0.2.112 | 3 | 5/15/2026 |
| 0.2.111 | 3 | 5/15/2026 |
| 0.2.110 | 3 | 5/15/2026 |
| 0.2.109 | 5 | 5/15/2026 |
| 0.1.0 | 7 | 5/8/2026 |
| 0.1.0-alpha | 5 | 1/27/2026 |