This module contains resources used to audit system settings/verify compliance.

This module is designed to modify Windows security options (Local Security Policy Administrative Tool). The Local Security Policy is responsible for managing many of the security features of Windows. This module is built to manage the following commponents: -User Rights Assignment (v1.0) -Advance... More info

Microsoft 365 Incident Response and Threat Hunting PowerShell tool. The Hawk is designed to ease the burden on M365 administrators who are performing Cloud forensic tasks for their organization. It accelerates the gathering of data from multiple sources in the service that be used to quickly identify malicious presence and activity.

DSCEA is a scanning engine for processing Test-DSCConfiguration results that provides the ability to scan an environment for compliance against a defined PowerShell DSC configuration. Visit https://microsoft.github.io/DSCEA for more information.

Tasks for auditing Active Directory

Audit and block PowerShell scripts on Windows machines.

Office 365 Troubleshooters module has been designed to help Office 365 Administrators to do troubleshooting on Office 365 services. The module will be monthly updated with new features and improve existing ones. The project is available at https://github.com/vilega/O365Troubleshooters PowerShell 7 is not supported as some Office 365 connections... More info

This modules provides Cmdlets for OCI Audit Service

ConfigMgr healthcheck reporting

Powershell resource for hardening Windows Server OS

This script will generate a HTML file to list all inactive users and the last logon of users based on the audit log. Inactive users will normally be collected using the users mailbox but external and users without a license don't have a mailbox. We will be using the audit log to find successful and failed logons for internal users and page viewes f... More info

Contains functions for parsing SDDL descriptors.

Module that replaces auditpol.exe with a custom version that can be used to audit or make changes to the Windows Security Policy.

A DSC resource for hardening Windows OS

Simple logging module for PowerShell, built for simplicity and usability.

Various Azure related functions. Some of them are explained at https://doitpsway.com/series/azure. Some of the interesting functions: - Add-AzureADAppUserConsent - granting permission consent on behalf of another user - Add-AzureADAppCertificate - add the auth. certificate (existing or create self-signed) to selected Azure application as an se... More info

Pulls list of active accounts not logged in for 30 days. Pulls Name,SamAccountName,DistinguishedName,Description for ease of sorting/labeling during audit. Used in Conjunction with SetADDescriptions.ps1 for ease of AD Labeling. https://www.powershellgallery.com/packages/SetADDescriptions/1.0.0

A module for running various Active Directory Tasks

This script will connect to Azure AD for the named group ObjectId and use this ID to query all Intune policy objects for any target assignments

Active Directory Audit Events