This module contains resources used to audit system settings/verify compliance.

This module is designed to modify Windows security options (Local Security Policy Administrative Tool). The Local Security Policy is responsible for managing many of the security features of Windows. This module is built to manage the following commponents: -User Rights Assignment (v1.0) -Advance... More info

A free, open-source forensics PowerShell module for conducting incident response and threat hunting of Microsoft Cloud environments. Hawk streamlines the collection of forensic data from Microsoft 365 and Entra ID environments to help security professionals, incident responders, and administrators quickly gather critical log data and id... More info

DSCEA is a scanning engine for processing Test-DSCConfiguration results that provides the ability to scan an environment for compliance against a defined PowerShell DSC configuration. Visit https://microsoft.github.io/DSCEA for more information.

Audit and block PowerShell scripts on Windows machines.

Module that replaces auditpol.exe with a custom version that can be used to audit or make changes to the Windows Security Policy.

Office 365 Troubleshooters module has been designed to help Office 365 Administrators to do troubleshooting on Office 365 services. The module will be monthly updated with new features and improve existing ones. The project is available at https://github.com/vilega/O365Troubleshooters PowerShell 7 is not supported as some Office 365 connections... More info

Tasks for auditing Active Directory

This modules provides Cmdlets for OCI Audit Service

Analyze and audit Microsoft Intune policy assignments. Check user, group, and device assignments, simulate group membership changes, search policies and settings, generate HTML reports, and more.

A DSC resource for hardening Windows OS

Contains functions for parsing SDDL descriptors.

M365Permissions - Microsoft 365 & Azure Permission Scanner For the enterprise Azure-native version, see https://www.m365permissions.com This module reports on permissions across SharePoint, Entra ID, Exchange Online, OneDrive, Power BI, Power Platform, Azure RBAC, and Azure DevOps. INSTALLATION: Install-PSResource -Name M365Permission... More info

ConfigMgr healthcheck reporting

Powershell resource for hardening Windows Server OS

Various Azure related functions. Some of them are explained at https://doitpsway.com/series/azure. This module has been DEPRECATED, because it is based on AzureAD module. Use AzureStuff module instead (built upon Microsoft.Graph.* and AZ modules instead).

Various Azure related functions focused on authentication etc. More details at https://doitpshway.com/series/azure. Some of the interesting functions: - Connect-AzAccount2 - proxy function for Connect-AzAccount, but supports reusing the existing session - Connect-PnPOnline2 - proxy function for Connect-PnPOnline with some enhancements like: auto... More info

This script will generate a HTML file to list all inactive users and the last logon of users based on the audit log. Inactive users will normally be collected using the users mailbox but external and users without a license don't have a mailbox. We will be using the audit log to find successful and failed logons for internal users and page viewes f... More info

This module uses PSWriteWord and PSGraph modules and GraphViz repository. It creates full Active Directory Organisational Audit.

Microsoft 365 Incident Response and Threat Hunting PowerShell tool. Osprey is designed to ease the burden on M365 administrators who are performing Cloud forensic tasks for their organization. It accelerates the gathering of data from multiple sources in the service that be used to quickly identify malicious presence and activity.