A PowerShell toolbox for Microsoft 365 security fans.

Automatic Documentation of M365 to simplify the life of admins and consultants.

Automatic Intune and Conditional Access Documentation to simplify the life of admins and consultants.

This script documents Azure AD Conditional Access Policies.

Azure Runbook - Dynamic Group - MFA State This script is designed for an Azure Runbook to assign users to two Azure AD groups based on their MFA capability (capable / non-capable). Before running the runbook, you need to set up an automation account with a managed identity. The managed identity requires the following Graph Permissions: - User.... More info

Module for tracking changes and monitoring Conditional Access Policies in Microsoft Entra Id

This module includes cmdlets to automate both creation and management (update) of Entra Conditional Access Policies, Named Locations, Authentication Strengths and more. Any dependencies including users and groups can also be automated. Solutions supports 3 types of group targeting: dynamic groups based on user tags, manual assignment ... More info

A module to simulate Microsoft Entra Conditional Access policy evaluation for hypothetical sign-in scenarios.

The `Get-ConditionalAccessNamedIP` function retrieves IP addresses from named locations in Conditional Access policies. You can filter the results based on whether the location is trusted or untrusted. Get-ConditionalAccessNamedIP -IsTrusted # Retrieves IP addresses from trusted named locations.