Parse-IntuneDiag

1.0

This script monitors a specified inbox directory for newly created or renamed ZIP files
(typically produced by Microsoft Intune diagnostics). When a matching ZIP is detected,
the script automatically:

- Extracts the ZIP contents
- Collects EVTX files into structured folders
- Collects and expands CAB files
- Extracts MDM Logs (EVTX and LOG)
- Converts EVTX files into
This script monitors a specified inbox directory for newly created or renamed ZIP files
(typically produced by Microsoft Intune diagnostics). When a matching ZIP is detected,
the script automatically:

- Extracts the ZIP contents
- Collects EVTX files into structured folders
- Collects and expands CAB files
- Extracts MDM Logs (EVTX and LOG)
- Converts EVTX files into JSON for easier analysis

The script is designed to handle modern browser download behavior (temporary files
renamed on completion) and uses FileSystemWatcher events to reliably detect completed
ZIP files.

It can be run interactively or under SYSTEM context (for example, as a scheduled task
or service wrapper).

Show more

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Script -Name Parse-IntuneDiag

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

MIT License

Package Details

Author(s)

  • JeffGilbert

Functions

Get-InteractiveUserDownloads

Dependencies

This script has no dependencies.

Release Notes

v1.0.0 - 4.20.26 - Initial release

FileList

Version History

Version Downloads Last updated
1.0 (current version) 9 4/19/2026