Invoke-M365QuickCheck
1.0.1
Eight fast checks against the settings attackers abuse most often in
small-business Microsoft 365 tenants. It writes an HTML report with
PASS / WARN / FAIL results and what to do about each one.
It changes NOTHING. It asks for read-only Microsoft Graph permissions and
only reads settings.
Checks: MFA enforcement (Security Defaults / Conditional Access),
legacy authe
small-business Microsoft 365 tenants. It writes an HTML report with
PASS / WARN / FAIL results and what to do about each one.
It changes NOTHING. It asks for read-only Microsoft Graph permissions and
only reads settings.
Checks: MFA enforcement (Security Defaults / Conditional Access),
legacy authe
Eight fast checks against the settings attackers abuse most often in
small-business Microsoft 365 tenants. It writes an HTML report with
PASS / WARN / FAIL results and what to do about each one.
It changes NOTHING. It asks for read-only Microsoft Graph permissions and
only reads settings.
Checks: MFA enforcement (Security Defaults / Conditional Access),
legacy authentication, Global Admin count, user consent to apps, app
registration by users, guest invitations, password expiration, and
"Anyone" sharing links in SharePoint/OneDrive.
The full version (about two dozen checks, including MFA registration,
admin hygiene, risky third-party apps, inbox rules, mailbox forwarding,
audit logging, DKIM and SMTP AUTH, plus an incident-response evidence
script) comes with the book:
https://radio1one.gumroad.com/l/qvoxbr
Show more
small-business Microsoft 365 tenants. It writes an HTML report with
PASS / WARN / FAIL results and what to do about each one.
It changes NOTHING. It asks for read-only Microsoft Graph permissions and
only reads settings.
Checks: MFA enforcement (Security Defaults / Conditional Access),
legacy authentication, Global Admin count, user consent to apps, app
registration by users, guest invitations, password expiration, and
"Anyone" sharing links in SharePoint/OneDrive.
The full version (about two dozen checks, including MFA registration,
admin hygiene, risky third-party apps, inbox rules, mailbox forwarding,
audit logging, DKIM and SMTP AUTH, plus an incident-response evidence
script) comes with the book:
https://radio1one.gumroad.com/l/qvoxbr
Installation Options
Owners
Copyright
(c) 2026 thecyberape. MIT License.
Package Details
Author(s)
- thecyberape
Tags
Microsoft365 M365 Office365 EntraID AzureAD Security Audit SecurityDefaults ConditionalAccess MFA Graph SMB
Functions
Add-Result Get-GraphAll ConvertTo-SafeHtml
Dependencies
This script has no dependencies.
Release Notes
1.0.1 - Added PowerShell Gallery metadata and AI-assistance disclosure. No functional changes.
1.0.0 - Initial release: 8 read-only checks with an HTML report.
FileList
- Invoke-M365QuickCheck.nuspec
- Invoke-M365QuickCheck.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 1.0.1 (current version) | 15 | 10/22/2026 |