Devolutions.CIEM
3.1.8
Cloud Infrastructure Entitlement Management (CIEM) for PowerShell Universal. Detects dormant permissions, right-sizes roles, maps identity-to-resource relationships, and surfaces attack paths across Azure and AWS.
Minimum PowerShell version
7.4
Installation Options
Owners
Copyright
(c) Devolutions Inc. All rights reserved.
Package Details
Author(s)
- Adam Bertram
Tags
CIEM Cloud Identities Security Azure AWS PowerShellUniversal IAM RBAC
PSEditions
Dependencies
This module has no dependencies.
FileList
- Devolutions.CIEM.nuspec
- .DS_Store
- Public\Set-CIEMConfig.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMAttackPath.ps1
- modules\Azure\Checks\Test-EntraGlobalAdminCountWithinLimit.ps1
- modules\Devolutions.CIEM.Checks\Public\Update-CIEMCheck.ps1
- modules\Devolutions.CIEM.Reports\Data\reports.json
- modules\Devolutions.CIEM.Graph\Data\attack_paths\dormant-privileged-subscription-access.json
- modules\Azure\Discovery\Public\New-CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Private\InvokeCIEMBatchInsert.ps1
- modules\Azure\Discovery\Data\discovery_coverage_areas.json
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\src\ciem-environment-tree.js
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-key-vault.svg
- Devolutions.CIEM.psm1
- Public\Reset-CIEMConfig.ps1
- modules\Devolutions.CIEM.Graph\Private\GetCIEMStoredAttackPath.ps1
- modules\Azure\Checks\Test-EntraPolicyEnsureDefaultUserCannotCreateTenant.ps1
- modules\Devolutions.CIEM.Checks\Public\Remove-CIEMScanRun.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-SeverityColor.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\guest-in-privileged-group.json
- modules\Azure\Discovery\Public\Save-CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Private\GetCIEMAzureEntityConfig.ps1
- modules\Azure\Discovery\Data\graph_kind_map.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-resource-group.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-static-web-app.svg
- Devolutions.CIEM.psd1
- Public\Get-CIEMProviderAuthMethod.ps1
- modules\Devolutions.CIEM.Graph\Private\ConvertCIEMGraphEntityRow.ps1
- modules\Azure\Checks\Test-EntraUserCannotCreateMicrosoft365Group.ps1
- modules\Devolutions.CIEM.Checks\Public\Remove-CIEMScanResult.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-PSUInstalledEnvironment.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\public-vm-to-keyvault.json
- modules\Azure\Discovery\Public\Stop-CIEMAzureDiscovery.ps1
- modules\Azure\Discovery\Private\BuildCIEMEntraTransitiveMembership.ps1
- modules\Azure\Discovery\Data\entities.psd1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-virtual-machine.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-iam-role.svg
- Private\ReadPSUCache.ps1
- modules\Devolutions.CIEM.Graph\Private\GetCIEMAttackPatternDefinition.ps1
- modules\Azure\Checks\Test-EntraPolicyEnsureDefaultUserCannotCreateApp.ps1
- modules\Devolutions.CIEM.Checks\Public\Save-CIEMScanRun.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMInfoContent.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\open-management-port.json
- modules\Azure\Discovery\Public\Get-CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Private\UpdateCIEMAzureEntity.ps1
- modules\Azure\Discovery\Data\discovery_phases.psd1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-kms.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-vpc.svg
- Classes\CIEMAuthenticationContext.ps1
- Private\ConvertToCIEMProvider.ps1
- modules\Devolutions.CIEM.Graph\Private\SaveCIEMGraphEntity.ps1
- modules\Azure\Checks\Test-IamCustomRoleHasPermissionToAdministerResourceLock.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMScanResult.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-CIEMSeverityRank.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\guest-user-with-privileged-role.json
- modules\Azure\Discovery\Public\Update-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\GetCIEMBuiltInRoleDefinitions.ps1
- modules\Azure\Infrastructure\Classes\CIEMAzureProviderApi.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-vm-extension.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-network-security-group.svg
- Classes\CIEMProvider.ps1
- Private\InvokeCIEMTransaction.ps1
- modules\Devolutions.CIEM.Graph\Private\InvokeCIEMAttackPathEvaluation.ps1
- modules\Azure\Checks\Test-EntraConditionalAccessPolicyRequireMfaForManagementApi.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMScanRun.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMErrorContent.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\disabled-account-with-roles.json
- modules\Azure\Discovery\Public\Save-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\InvokeCIEMGraphComputedEdgeBuild.ps1
- modules\Azure\Infrastructure\Classes\CIEMAzureAuthenticationProfile.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-custom-api.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-subscription.svg
- Checks\Invoke-CIEMAttackPathRemediation.ps1
- Private\RegisterCIEMArgumentCompleters.ps1
- modules\Devolutions.CIEM.Graph\Private\UpdateCIEMAttackPathStorageSchema.ps1
- modules\Azure\Checks\Test-EntraPolicyGuestInviteOnlyForAdminRole.ps1
- modules\Devolutions.CIEM.Checks\Public\New-CIEMCheck.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMSuccessContent.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\privileged-managed-identity-broad-scope.json
- modules\Azure\Discovery\Public\Get-CIEMAzureResourceType.ps1
- modules\Azure\Discovery\Private\GetCIEMAzureDiscoveryPhaseConfig.ps1
- modules\Azure\Infrastructure\Classes\CIEMAzureAuthenticationContext.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-alert.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-cloud.svg
- Checks\Start-CIEMAzureDiscovery.ps1
- data\psu-scripts.json
- modules\Devolutions.CIEM.Graph\Private\RemoveCIEMGraphEntity.ps1
- modules\Azure\Checks\Test-EntraSecurityDefaultsEnabled.ps1
- modules\Devolutions.CIEM.Checks\Private\GetCIEMEntraNeeds.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-StatusColor.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\group-inherited-privilege-escalation.json
- modules\Azure\Discovery\Public\Get-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\SaveCIEMAzureResourceType.ps1
- modules\Azure\Infrastructure\Public\Set-CIEMAzureAuthenticationProfileActive.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-role-definition.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-app-service.svg
- Checks\New-CIEMScanRun.ps1
- data\schema.sql
- modules\Devolutions.CIEM.Graph\Private\ResolveCIEMAttackPathRemediationScript.ps1
- modules\Azure\Checks\Test-EntraPolicyGuestUserAccessRestriction.ps1
- modules\Devolutions.CIEM.Checks\Private\ConvertFromCIEMStoredResource.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-CIEMPSUJobOutput.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\service-principal-owner-on-subscription.json
- modules\Azure\Discovery\Public\Get-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\GetCIEMAzureDiscoveryCoverageReportData.ps1
- modules\Azure\Infrastructure\Public\Remove-CIEMAzureAuthenticationProfile.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-management-group.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-log-analytics-workspace.svg
- .universal\dashboards.ps1
- data\relationship_colors.json
- modules\Devolutions.CIEM.Graph\Private\TestCIEMAttackPathContainsPrincipal.ps1
- modules\Azure\Checks\Test-EntraUserWithVmAccessHasMfa.ps1
- modules\Devolutions.CIEM.Checks\Private\UpdateCIEMCheckStorageSchema.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMLastDiscoveryHeader.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_paths\internet-exposed-privileged-mi.json
- modules\Azure\Discovery\Public\Get-CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Private\RemoveCIEMAzureEntity.ps1
- modules\Azure\Infrastructure\Public\Update-CIEMAzureAuthenticationProfile.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-resource-mover.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-role-assignment.svg
- .universal\settings.ps1
- data\module_roots.psd1
- modules\Devolutions.CIEM.Graph\Private\ResolveCIEMAttackPathFilter.ps1
- modules\Azure\Checks\check_catalog.json
- modules\Devolutions.CIEM.Checks\Private\SyncCIEMCheckCatalog.ps1
- modules\Devolutions.CIEM.PSU\Public\Get-CIEMRelationshipColor.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\guest-user-holding-a-privileged-role.ps1
- modules\Azure\Discovery\Public\Start-CIEMAzureDiscovery.ps1
- modules\Azure\Discovery\Private\InvokeCIEMResourceGraphQuery.ps1
- modules\Azure\Infrastructure\Public\Save-CIEMAzureAuthenticationProfile.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-network-interface.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-rds.svg
- .universal\authentication.ps1
- modules\PSUSQLite\PSUSQLite.psd1
- modules\Devolutions.CIEM.Graph\Private\GetCIEMGraphEntityConfig.ps1
- modules\Azure\Checks\Test-EntraPolicyDefaultUserCannotCreateSecurityGroup.ps1
- modules\Devolutions.CIEM.Checks\Private\GetCIEMCheckCatalog.ps1
- modules\Devolutions.CIEM.PSU\Public\Invoke-CIEMJobWithProgress.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\service-principal-holding-owner-role-on-a-subscription.ps1
- modules\Azure\Discovery\Public\Save-CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Private\GetCIEMAzureEntity.ps1
- modules\Azure\Infrastructure\Public\New-CIEMAzureAuthenticationProfile.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-public-ip-address.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-iam-identity-center.svg
- .universal\roles.ps1
- modules\PSUSQLite\PSUSQLite.psm1
- modules\Devolutions.CIEM.Graph\Private\GetCIEMGraphEntity.ps1
- modules\Azure\Checks\Test-EntraTrustedNamedLocationExist.ps1
- modules\Devolutions.CIEM.Checks\Private\GetCIEMIAMNeeds.ps1
- modules\Devolutions.CIEM.PSU\Public\Resolve-CIEMResourceIconDataUri.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\dormant-identity-with-privileged-subscription-level-role.ps1
- modules\Azure\Discovery\Public\New-CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Private\TestCIEMAzureDiscoveryPhaseRegistry.ps1
- modules\Azure\Infrastructure\Public\Get-CIEMAzureAuthenticationProfile.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-account.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-users.svg
- Public\Update-CIEMProvider.ps1
- modules\Devolutions.CIEM.Graph\Classes\CIEMAttackPath.ps1
- modules\Devolutions.CIEM.Graph\Private\ConvertFromCIEMAttackPathRow.ps1
- modules\Azure\Checks\Test-EntraPolicyRestrictUserConsentForApp.ps1
- modules\Devolutions.CIEM.Checks\Private\InvokeCIEMCheck.ps1
- modules\Devolutions.CIEM.PSU\Public\New-CIEMEnvironmentTree.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\internet-exposed-vm-with-managed-identity-accessing-key-vault.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Private\InvokeCIEMDiscoveryPhase.ps1
- modules\Azure\Infrastructure\Public\Invoke-AzureApi.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-storage-account.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-app-service-slot.svg
- Public\New-CIEMProvider.ps1
- modules\Devolutions.CIEM.Graph\Classes\CIEMGraphNode.ps1
- modules\Devolutions.CIEM.Graph\Data\graph_schema.sql
- modules\Devolutions.CIEM.Checks\Classes\CIEMProviderService.ps1
- modules\Devolutions.CIEM.Checks\Private\TestEntraAuthorizationPolicyBooleanSetting.ps1
- modules\Devolutions.CIEM.PSU\Public\New-DevolutionsCIEMApp.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\guest-user-is-a-member-of-a-group-that-holds-a-privileged-role.ps1
- modules\Azure\Discovery\Public\New-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\InvokeCIEMEntraEntityCollection.ps1
- modules\Azure\Infrastructure\Public\Connect-CIEMAzure.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-id.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-network-watcher.svg
- Public\Get-CIEMResourceType.ps1
- modules\Devolutions.CIEM.Graph\Classes\CIEMAttackPathRule.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_script_template.ps1
- modules\Devolutions.CIEM.Checks\Classes\CIEMScanResult.ps1
- modules\Devolutions.CIEM.Checks\Private\InvokeCIEMScan.ps1
- modules\Devolutions.CIEM.PSU\Private\GetCIEMPSUPageRegistry.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\management-port-open-to-the-internet.ps1
- modules\Azure\Discovery\Public\Update-CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Private\ConvertCIEMAzureEntityRow.ps1
- modules\Azure\Infrastructure\Private\InvokeCIEMAzureSleep.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-app-service-certificate.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-application-insights.svg
- Public\Get-CIEMIdentity.ps1
- modules\Devolutions.CIEM.Graph\Classes\CIEMGraphEdge.ps1
- modules\Devolutions.CIEM.Graph\Data\remediation_tokens.psd1
- modules\Devolutions.CIEM.Checks\Classes\CIEMServiceCache.ps1
- modules\Devolutions.CIEM.Checks\Private\SetCIEMCheckState.ps1
- modules\Devolutions.CIEM.PSU\Private\RegisterCIEMEnvironmentTreeAsset.ps1
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\disabled-account-still-holding-active-role-assignments.ps1
- modules\Azure\Discovery\Public\Save-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\InvokeCIEMEntraPermissionCollection.ps1
- modules\Azure\Infrastructure\Private\GetCIEMAzureAuthProfileCache.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-group.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-lambda.svg
- Public\Get-CIEMProvider.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMAttackPathRemediationScript.ps1
- modules\Devolutions.CIEM.Graph\Data\entities.psd1
- modules\Devolutions.CIEM.Checks\Classes\CIEMCheck.ps1
- modules\Devolutions.CIEM.Checks\Data\remediation-permissions.json
- modules\Devolutions.CIEM.PSU\Data\severity_catalog.json
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\internet-exposed-vm-with-privileged-managed-identity.ps1
- modules\Azure\Discovery\Public\Update-CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Private\ResolveCIEMNodeKind.ps1
- modules\Azure\Infrastructure\Private\InvokeCIEMParallelForEach.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-application.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-cognitive-services.svg
- Public\Get-CIEMDatabasePath.ps1
- modules\Devolutions.CIEM.Graph\Public\Remove-CIEMGraphEdge.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Classes\CIEMEffectivePermission.ps1
- modules\Devolutions.CIEM.Checks\Public\Disable-CIEMCheck.ps1
- modules\AWS\Checks\Test-IamNoRootAccessKey.ps1
- modules\Devolutions.CIEM.PSU\Data\status_catalog.json
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\vm-with-managed-identity-holding-a-privileged-subscription-role.ps1
- modules\Azure\Discovery\Public\Save-CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Private\SaveCIEMAzureTable.ps1
- modules\Azure\Infrastructure\Private\InvokeAzureApiTransport.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-user.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-virtual-network.svg
- Public\Invoke-CIEMQuery.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMIdentityRiskSignals.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Public\Get-CIEMEffectivePermission.ps1
- modules\Devolutions.CIEM.Checks\Public\Save-CIEMScanResult.ps1
- modules\AWS\Checks\Test-IamRootMfaEnabled.ps1
- modules\Devolutions.CIEM.PSU\Data\pages.json
- modules\Devolutions.CIEM.Graph\Data\attack_path_remediation_scripts\identity-inherits-privileged-role-through-group-membership.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Private\InvokeCIEMEntraRelationshipCollection.ps1
- modules\Azure\Infrastructure\Private\GetCIEMAzureProviderApi.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-ec2.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-workload-id.svg
- Public\Import-CIEMScript.ps1
- modules\Devolutions.CIEM.Graph\Public\Save-CIEMGraphNode.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ResolveCIEMAzureEffectivePermission.ps1
- modules\Devolutions.CIEM.Checks\Public\Remove-CIEMCheck.ps1
- modules\AWS\Checks\Test-IamUserMfaEnabledConsoleAccess.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMAboutPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureResourceType.ps1
- modules\Azure\Discovery\Public\Get-CIEMAzureIdentityHierarchy.ps1
- modules\Azure\Discovery\Private\ResolveCIEMScopeLabel.ps1
- modules\Azure\Infrastructure\Private\SetCIEMAzureAuthProfileCache.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-iam-permissions.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-iam.svg
- Public\Get-CIEMSecret.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMGraphPath.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ConvertCIEMEffectivePermissionAction.ps1
- modules\Devolutions.CIEM.Checks\Public\Save-CIEMCheck.ps1
- modules\AWS\Checks\Test-IamPasswordPolicyLowercase.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMScanHistoryPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureDiscoveryCoverageReport.ps1
- modules\Azure\Discovery\Public\Get-CIEMAzureArmHierarchy.ps1
- modules\Azure\Discovery\Private\ResolveCIEMManagedIdentityHost.ps1
- modules\Azure\Infrastructure\Data\azure_schema.sql
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-app-service-plan.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-s3.svg
- Public\Save-CIEMProvider.ps1
- modules\Devolutions.CIEM.Graph\Public\Invoke-CIEMAttackPathRemediation.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ResolveCIEMEffectivePermissionActionDescription.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMRequiredPermission.ps1
- modules\AWS\Checks\check_catalog.json
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMDashboardPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\InvokeCIEMGraphEdgeBuild.ps1
- modules\AWS\Infrastructure\Public\Invoke-AWSAPI.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-power-platform.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-dashboard.svg
- Public\Set-CIEMSecret.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMGraphEdge.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ResolveCIEMPrincipalType.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMCheckMetadata.ps1
- modules\PSUSQLite\Public\Open-PSUSQLiteConnection.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMScanPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Public\New-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\InvokeCIEMAzureEffectiveRoleAssignmentBuild.ps1
- modules\AWS\Infrastructure\Public\Connect-CIEMAWS.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-s3-bucket.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-secrets-manager.svg
- Public\Get-CIEMDefaultConfig.ps1
- modules\Devolutions.CIEM.Graph\Public\Update-CIEMAttackPath.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Private\ResolveCIEMAwsEffectivePermission.ps1
- modules\Devolutions.CIEM.Checks\Public\New-CIEMScanResult.ps1
- modules\PSUSQLite\Public\Invoke-PSUSQLiteQuery.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMAttackPathPatternsPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\NewCIEMAzureResourceType.ps1
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\package-lock.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-logic-app.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-disk.svg
- Public\Remove-CIEMProvider.ps1
- modules\Devolutions.CIEM.Graph\Public\Save-CIEMGraphEdge.ps1
- modules\Devolutions.CIEM.EffectivePermissions\Data\effective_permission_descriptions.json
- modules\Devolutions.CIEM.Checks\Public\Enable-CIEMCheck.ps1
- modules\PSUSQLite\Private\Resolve-PSUSQLiteAssembly.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMAttackPathsPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureResourceRelationship.ps1
- modules\Azure\Discovery\Public\Update-CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Private\RemoveCIEMAzureResourceType.ps1
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\package.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-scheduler.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-ec2-instance.svg
- Public\Write-CIEMLog.ps1
- modules\Devolutions.CIEM.Graph\Public\Sync-CIEMAttackPathRuleCatalog.ps1
- modules\Azure\Checks\Test-IamRoleUserAccessAdminRestricted.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMProviderService.ps1
- modules\Devolutions.CIEM.Reports\Classes\CIEMReport.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMEnvironmentPage.ps1
- modules\Azure\Discovery\Classes\CIEMAzureEffectiveRoleAssignment.ps1
- modules\Azure\Discovery\Private\UpdateCIEMAzureResourceType.ps1
- modules\Azure\Discovery\Private\ResolveCIEMResourceTypeMetadata.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\resource-icon-map.json
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-managed-identity.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-sql-database.svg
- Public\Repair-CIEMLegacyScriptRegistration.ps1
- modules\Devolutions.CIEM.Graph\Public\Remove-CIEMGraphNode.ps1
- modules\Azure\Checks\Test-EntraPolicyUserConsentForVerifiedApp.ps1
- modules\Devolutions.CIEM.Checks\Public\New-CIEMCheckMetadata.ps1
- modules\Devolutions.CIEM.Reports\Classes\CIEMReportResult.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMIdentitiesPage.ps1
- modules\Azure\Discovery\Public\Remove-CIEMAzureArmResource.ps1
- modules\Azure\Discovery\Private\InvokeCIEMGraphNodeBuild.ps1
- modules\Azure\Discovery\Private\InvokeCIEMArmHierarchyBuild.ps1
- modules\Devolutions.CIEM.PSU\Data\icons\README.md
- modules\Devolutions.CIEM.PSU\Data\icons\resources\azure-sql-server.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-cloudwatch.svg
- Public\New-CIEMDatabase.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMGraphNode.ps1
- modules\Azure\Checks\Test-EntraNonPrivilegedUserHasMfa.ps1
- modules\Devolutions.CIEM.Checks\Public\Get-CIEMCheck.ps1
- modules\Devolutions.CIEM.Reports\Public\Get-CIEMReport.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMNavigation.ps1
- modules\Azure\Discovery\Public\Get-CIEMAzureDiscoveryRun.ps1
- modules\Azure\Discovery\Private\TestCIEMAzurePrivilegedRole.ps1
- modules\Azure\Discovery\Data\privileged_roles.json
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\dist\index.bundle.js
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-organizations.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-cloudtrail.svg
- Public\Get-CIEMConfig.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMIdentityRiskSummary.ps1
- modules\Azure\Checks\Test-EntraPrivilegedUserHasMfa.ps1
- modules\Devolutions.CIEM.Checks\Public\Update-CIEMScanRun.ps1
- modules\Devolutions.CIEM.Reports\Public\Invoke-CIEMReport.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMReportsPage.ps1
- modules\Azure\Discovery\Public\Update-CIEMAzureEntraResource.ps1
- modules\Azure\Discovery\Private\InvokeCIEMIdentityHierarchyBuild.ps1
- modules\Azure\Discovery\Data\discovery_schema.sql
- modules\Devolutions.CIEM.PSU\Components\EnvironmentTree\scripts\build.js
- modules\Devolutions.CIEM.PSU\Data\icons\resources\aws-user.svg
- modules\Devolutions.CIEM.PSU\Data\icons\resources\entra-service-principal.svg
- Public\Connect-CIEM.ps1
- modules\Devolutions.CIEM.Graph\Public\Get-CIEMAttackPathPattern.ps1
- modules\Azure\Checks\Test-IamSubscriptionRolesOwnerCustomNotCreated.ps1
- modules\Devolutions.CIEM.Checks\Public\New-CIEMScanRun.ps1
- modules\Devolutions.CIEM.Reports\Private\GetCIEMReportRegistry.ps1
- modules\Devolutions.CIEM.PSU\Pages\New-CIEMConfigPage.ps1
- modules\Azure\Discovery\Public\New-CIEMAzureArmResource.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 3.1.8 (current version) | 7 | 4/30/2026 |
| 3.1.7 | 3 | 4/30/2026 |
| 1.2.0 | 8 | 4/24/2026 |
| 1.1.3 | 4 | 4/24/2026 |
| 1.1.1 | 4 | 4/24/2026 |
| 1.1.0 | 5 | 4/24/2026 |
| 1.0.2 | 5 | 4/23/2026 |
| 1.0.1 | 3 | 4/23/2026 |
| 0.10.6 | 6 | 4/21/2026 |
| 0.10.5 | 3 | 4/21/2026 |
| 0.10.4 | 3 | 4/21/2026 |
| 0.10.3 | 3 | 4/21/2026 |
| 0.10.2 | 3 | 4/21/2026 |
| 0.10.1 | 4 | 4/21/2026 |
| 0.3.278 | 6 | 4/17/2026 |
| 0.3.180 | 14 | 4/8/2026 |
| 0.3.177 | 4 | 4/7/2026 |
| 0.3.176 | 6 | 4/7/2026 |
| 0.3.174 | 6 | 4/7/2026 |
| 0.3.29 | 56 | 2/10/2026 |
| 0.3.28 | 13 | 2/6/2026 |
| 0.3.27 | 5 | 2/6/2026 |
| 0.3.26 | 7 | 2/6/2026 |
| 0.3.25 | 4 | 2/6/2026 |
| 0.3.24 | 5 | 2/6/2026 |
| 0.3.23 | 5 | 2/6/2026 |
| 0.3.22 | 7 | 2/6/2026 |
| 0.3.21 | 5 | 2/6/2026 |
| 0.3.20 | 7 | 2/6/2026 |
| 0.3.19 | 4 | 2/6/2026 |
| 0.3.18 | 4 | 2/6/2026 |
| 0.3.17 | 4 | 2/6/2026 |
| 0.3.16 | 4 | 2/6/2026 |
| 0.3.15 | 7 | 2/6/2026 |
| 0.3.14 | 5 | 2/5/2026 |
| 0.3.13 | 4 | 2/5/2026 |
| 0.3.12 | 5 | 2/5/2026 |
| 0.3.11 | 4 | 2/5/2026 |
| 0.3.10 | 4 | 2/5/2026 |
| 0.3.9 | 4 | 2/5/2026 |
| 0.3.8 | 4 | 2/5/2026 |
| 0.3.7 | 4 | 2/5/2026 |
| 0.3.6 | 6 | 2/4/2026 |
| 0.3.5 | 4 | 2/4/2026 |
| 0.3.4 | 4 | 2/4/2026 |
| 0.3.3 | 4 | 2/4/2026 |
| 0.3.2 | 5 | 2/4/2026 |
| 0.3.1 | 5 | 2/4/2026 |
| 0.3.0 | 4 | 2/4/2026 |
| 0.2.108 | 4 | 2/4/2026 |
| 0.2.107 | 4 | 2/4/2026 |
| 0.2.106 | 4 | 2/4/2026 |
| 0.2.105 | 4 | 2/4/2026 |
| 0.2.104 | 4 | 2/4/2026 |
| 0.2.103 | 4 | 2/4/2026 |
| 0.2.102 | 4 | 2/4/2026 |
| 0.2.101 | 4 | 2/4/2026 |
| 0.2.100 | 4 | 2/4/2026 |
| 0.2.99 | 6 | 2/4/2026 |
| 0.2.98 | 6 | 2/4/2026 |
| 0.2.97 | 5 | 2/3/2026 |
| 0.2.96 | 5 | 2/3/2026 |
| 0.2.95 | 5 | 2/3/2026 |
| 0.2.94 | 3 | 2/3/2026 |
| 0.2.93 | 4 | 2/3/2026 |
| 0.2.92 | 5 | 2/3/2026 |
| 0.2.91 | 6 | 2/3/2026 |
| 0.2.90 | 5 | 2/3/2026 |
| 0.2.89 | 6 | 2/3/2026 |
| 0.2.88 | 4 | 2/3/2026 |
| 0.2.86 | 3 | 2/3/2026 |
| 0.2.85 | 4 | 2/3/2026 |
| 0.2.84 | 4 | 2/3/2026 |
| 0.2.83 | 5 | 2/3/2026 |
| 0.2.82 | 6 | 2/3/2026 |
| 0.2.81 | 5 | 2/3/2026 |
| 0.2.80 | 5 | 2/3/2026 |
| 0.2.79 | 5 | 2/3/2026 |
| 0.2.78 | 5 | 2/3/2026 |
| 0.2.77 | 5 | 2/3/2026 |
| 0.2.76 | 5 | 2/2/2026 |
| 0.2.75 | 5 | 2/2/2026 |
| 0.2.74 | 5 | 2/2/2026 |
| 0.2.73 | 6 | 2/2/2026 |
| 0.2.72 | 5 | 2/2/2026 |
| 0.2.71 | 5 | 2/2/2026 |
| 0.2.70 | 5 | 2/2/2026 |
| 0.2.69 | 5 | 2/2/2026 |
| 0.2.68 | 5 | 2/2/2026 |
| 0.2.67 | 5 | 2/2/2026 |
| 0.2.66 | 12 | 2/2/2026 |
| 0.2.64 | 15 | 2/2/2026 |
| 0.2.63 | 15 | 2/2/2026 |
| 0.2.61 | 8 | 2/2/2026 |
| 0.2.60 | 11 | 1/30/2026 |
| 0.2.59 | 6 | 1/30/2026 |
| 0.2.58 | 5 | 1/30/2026 |
| 0.2.57 | 5 | 1/30/2026 |
| 0.2.56 | 7 | 1/30/2026 |
| 0.2.55 | 5 | 1/30/2026 |
| 0.2.54 | 6 | 1/30/2026 |
| 0.2.53 | 5 | 1/30/2026 |
| 0.2.52 | 5 | 1/30/2026 |
| 0.2.51 | 5 | 1/30/2026 |
| 0.2.50 | 6 | 1/30/2026 |
| 0.2.49 | 5 | 1/30/2026 |
| 0.2.48 | 5 | 1/30/2026 |
| 0.2.47 | 7 | 1/30/2026 |
| 0.2.46 | 5 | 1/30/2026 |
| 0.2.45 | 5 | 1/30/2026 |
| 0.2.44 | 6 | 1/30/2026 |
| 0.2.43 | 5 | 1/30/2026 |
| 0.2.42 | 6 | 1/30/2026 |
| 0.2.41 | 7 | 1/29/2026 |
| 0.2.40 | 7 | 1/29/2026 |
| 0.2.39 | 6 | 1/29/2026 |
| 0.2.38 | 6 | 1/29/2026 |
| 0.2.37 | 6 | 1/29/2026 |
| 0.2.36 | 7 | 1/29/2026 |
| 0.2.35 | 5 | 1/29/2026 |
| 0.2.34 | 7 | 1/29/2026 |
| 0.2.33 | 6 | 1/29/2026 |
| 0.2.32 | 6 | 1/29/2026 |
| 0.2.31 | 6 | 1/29/2026 |
| 0.2.30 | 7 | 1/29/2026 |
| 0.2.29 | 8 | 1/29/2026 |
| 0.2.28 | 5 | 1/29/2026 |
| 0.2.27 | 7 | 1/29/2026 |
| 0.2.26 | 7 | 1/29/2026 |
| 0.2.24 | 6 | 1/29/2026 |
| 0.2.23 | 7 | 1/29/2026 |
| 0.2.22 | 5 | 1/29/2026 |
| 0.2.21 | 9 | 1/28/2026 |
| 0.2.18 | 6 | 1/28/2026 |
| 0.2.17 | 7 | 1/28/2026 |
| 0.2.15 | 6 | 1/28/2026 |
| 0.2.13 | 8 | 1/28/2026 |
| 0.2.11 | 7 | 1/28/2026 |
| 0.2.10 | 5 | 1/28/2026 |
| 0.2.9 | 7 | 1/28/2026 |
| 0.2.7 | 8 | 1/27/2026 |
| 0.2.5 | 7 | 1/27/2026 |
| 0.2.4 | 9 | 1/27/2026 |
| 0.2.3 | 7 | 1/27/2026 |
| 0.2.1 | 8 | 1/27/2026 |
| 0.2.0 | 7 | 1/27/2026 |
| 0.1.1 | 7 | 1/27/2026 |
| 0.1.0-alpha | 5 | 1/27/2026 |