AzResourceAnalyzer

Azure resource collection and posture assessment with auto-discovered modular collectors and checks.

Minimum PowerShell version

7.0

Installation Options

Owners

• NCS

Copyright

(c) 2026 NCS Dojo. All rights reserved.

Package Details

FileList

• AzResourceAnalyzer.nuspec
• Checks\CIS-2-Analytics\CIS-2-1-7.ps1
• Checks\CIS-3-Compute\CIS-3-30.ps1
• Checks\CIS-3-Compute\CIS-3-54.ps1
• Checks\CIS-6-Management\CIS-6-1-1-3.ps1
• Checks\CIS-7-Networking\CIS-7-11.ps1
• Checks\CIS-7-Networking\CIS-7-35.ps1
• Checks\CIS-8-Security\CIS-8-1-7-1.ps1
• Checks\CIS-8-Security\CIS-8-28.ps1
• Checks\CIS-8-Security\CIS-8-41.ps1
• Checks\CIS-9-Storage\CIS-9-1-1.ps1
• Checks\CIS-9-Storage\CIS-9-4-3.ps1
• Collectors\ResourceGraph\ContainerInstance.ps1
• Collectors\ResourceGraph\PostgreSQL.ps1
• AzResourceAnalyzer.psd1
• Checks\CIS-2-Analytics\CIS-2-1-8.ps1
• Checks\CIS-3-Compute\CIS-3-31.ps1
• Checks\CIS-3-Compute\CIS-3-55.ps1
• Checks\CIS-6-Management\CIS-6-1-1-4.ps1
• Checks\CIS-7-Networking\CIS-7-12.ps1
• Checks\CIS-7-Networking\CIS-7-4.ps1
• Checks\CIS-8-Security\CIS-8-1-7-2.ps1
• Checks\CIS-8-Security\CIS-8-29.ps1
• Checks\CIS-8-Security\CIS-8-42.ps1
• Checks\CIS-9-Storage\CIS-9-1-2.ps1
• Checks\CIS-9-Storage\CIS-9-5-1.ps1
• Collectors\ResourceGraph\ContainerRegistry.ps1
• Collectors\ResourceGraph\PostgreSQLConfig.ps1
• AzResourceAnalyzer.psm1
• Checks\CIS-2-Analytics\CIS-2-1-9.ps1
• Checks\CIS-3-Compute\CIS-3-32.ps1
• Checks\CIS-3-Compute\CIS-3-56.ps1
• Checks\CIS-6-Management\CIS-6-1-1-5.ps1
• Checks\CIS-7-Networking\CIS-7-13.ps1
• Checks\CIS-7-Networking\CIS-7-5.ps1
• Checks\CIS-8-Security\CIS-8-1-7-3.ps1
• Checks\CIS-8-Security\CIS-8-3-1.ps1
• Checks\CIS-8-Security\CIS-8-43.ps1
• Checks\CIS-9-Storage\CIS-9-1-3.ps1
• Checks\CIS-9-Storage\CIS-9-5-2.ps1
• Collectors\ResourceGraph\CosmosDB.ps1
• Collectors\ResourceGraph\PublicIP.ps1
• LICENSE
• Checks\CIS-3-Compute\CIS-3-1-1.ps1
• Checks\CIS-3-Compute\CIS-3-33.ps1
• Checks\CIS-3-Compute\CIS-3-6.ps1
• Checks\CIS-6-Management\CIS-6-1-1-6.ps1
• Checks\CIS-7-Networking\CIS-7-14.ps1
• Checks\CIS-7-Networking\CIS-7-6.ps1
• Checks\CIS-8-Security\CIS-8-1-7-4.ps1
• Checks\CIS-8-Security\CIS-8-3-10.ps1
• Checks\CIS-8-Security\CIS-8-44.ps1
• Checks\CIS-9-Storage\CIS-9-2-1.ps1
• Checks\CIS-9-Storage\CIS-9-5-3.ps1
• Collectors\ResourceGraph\Databricks.ps1
• Collectors\ResourceGraph\RBAC.ps1
• README.md
• Checks\CIS-3-Compute\CIS-3-10.ps1
• Checks\CIS-3-Compute\CIS-3-34.ps1
• Checks\CIS-3-Compute\CIS-3-7.ps1
• Checks\CIS-6-Management\CIS-6-1-1-7.ps1
• Checks\CIS-7-Networking\CIS-7-15.ps1
• Checks\CIS-7-Networking\CIS-7-7.ps1
• Checks\CIS-8-Security\CIS-8-1-8-1.ps1
• Checks\CIS-8-Security\CIS-8-3-11.ps1
• Checks\CIS-8-Security\CIS-8-45.ps1
• Checks\CIS-9-Storage\CIS-9-2-2.ps1
• Checks\CIS-9-Storage\CIS-9-5-4.ps1
• Collectors\ResourceGraph\DataFactory.ps1
• Collectors\ResourceGraph\RecoveryVault.ps1
• Classes\ArTokenStore.ps1
• Checks\CIS-3-Compute\CIS-3-11.ps1
• Checks\CIS-3-Compute\CIS-3-35.ps1
• Checks\CIS-3-Compute\CIS-3-8.ps1
• Checks\CIS-6-Management\CIS-6-1-1-8.ps1
• Checks\CIS-7-Networking\CIS-7-16.ps1
• Checks\CIS-7-Networking\CIS-7-8.ps1
• Checks\CIS-8-Security\CIS-8-1-9-1.ps1
• Checks\CIS-8-Security\CIS-8-3-2.ps1
• Checks\CIS-8-Security\CIS-8-46.ps1
• Checks\CIS-9-Storage\CIS-9-2-3.ps1
• Collectors\KeyVault\KeyVaultCertificates.ps1
• Collectors\ResourceGraph\DDoSProtection.ps1
• Collectors\ResourceGraph\RedisCache.ps1
• Private\Assert-ArSession.ps1
• Checks\CIS-3-Compute\CIS-3-12.ps1
• Checks\CIS-3-Compute\CIS-3-36.ps1
• Checks\CIS-3-Compute\CIS-3-9.ps1
• Checks\CIS-6-Management\CIS-6-1-1-9.ps1
• Checks\CIS-7-Networking\CIS-7-17.ps1
• Checks\CIS-7-Networking\CIS-7-9.ps1
• Checks\CIS-8-Security\CIS-8-10.ps1
• Checks\CIS-8-Security\CIS-8-3-3.ps1
• Checks\CIS-8-Security\CIS-8-47.ps1
• Checks\CIS-9-Storage\CIS-9-3-1-1.ps1
• Collectors\KeyVault\KeyVaultKeys.ps1
• Collectors\ResourceGraph\DefenderPricing.ps1
• Collectors\ResourceGraph\RouteFilter.ps1
• Private\GraphCollector.ps1
• Checks\CIS-3-Compute\CIS-3-13.ps1
• Checks\CIS-3-Compute\CIS-3-37.ps1
• Checks\CIS-5-Identity\CIS-5-1-1.ps1
• Checks\CIS-6-Management\CIS-6-1-2-1.ps1
• Checks\CIS-7-Networking\CIS-7-18.ps1
• Checks\CIS-8-Security\CIS-8-1-1-1.ps1
• Checks\CIS-8-Security\CIS-8-11.ps1
• Checks\CIS-8-Security\CIS-8-3-4.ps1
• Checks\CIS-8-Security\CIS-8-48.ps1
• Checks\CIS-9-Storage\CIS-9-3-1-2.ps1
• Collectors\KeyVault\KeyVaultSecrets.ps1
• Collectors\ResourceGraph\DiagnosticSetting.ps1
• Collectors\ResourceGraph\RouteTable.ps1
• Private\KeyVaultCollector.ps1
• Checks\CIS-3-Compute\CIS-3-14.ps1
• Checks\CIS-3-Compute\CIS-3-38.ps1
• Checks\CIS-5-Identity\CIS-5-1-2.ps1
• Checks\CIS-6-Management\CIS-6-1-2-10.ps1
• Checks\CIS-7-Networking\CIS-7-19.ps1
• Checks\CIS-8-Security\CIS-8-1-10.ps1
• Checks\CIS-8-Security\CIS-8-12.ps1
• Checks\CIS-8-Security\CIS-8-3-5.ps1
• Checks\CIS-8-Security\CIS-8-49.ps1
• Checks\CIS-9-Storage\CIS-9-3-1-3.ps1
• Collectors\MicrosoftGraph\ConditionalAccess.ps1
• Collectors\ResourceGraph\Disk.ps1
• Collectors\ResourceGraph\SecurityAssessment.ps1
• Private\NSGHelpers.ps1
• Checks\CIS-3-Compute\CIS-3-15.ps1
• Checks\CIS-3-Compute\CIS-3-39.ps1
• Checks\CIS-5-Identity\CIS-5-1-3.ps1
• Checks\CIS-6-Management\CIS-6-1-2-11.ps1
• Checks\CIS-7-Networking\CIS-7-2.ps1
• Checks\CIS-8-Security\CIS-8-1-11.ps1
• Checks\CIS-8-Security\CIS-8-13.ps1
• Checks\CIS-8-Security\CIS-8-3-6.ps1
• Checks\CIS-8-Security\CIS-8-5.ps1
• Checks\CIS-9-Storage\CIS-9-3-10.ps1
• Collectors\MicrosoftGraph\DisabledUsers.ps1
• Collectors\ResourceGraph\ExpressRoute.ps1
• Collectors\ResourceGraph\SecurityContact.ps1
• Private\ResourceGraphWorker.ps1
• Checks\CIS-3-Compute\CIS-3-16.ps1
• Checks\CIS-3-Compute\CIS-3-4.ps1
• Checks\CIS-5-Identity\CIS-5-1-4.ps1
• Checks\CIS-6-Management\CIS-6-1-2-2.ps1
• Checks\CIS-7-Networking\CIS-7-20.ps1
• Checks\CIS-8-Security\CIS-8-1-12.ps1
• Checks\CIS-8-Security\CIS-8-14.ps1
• Checks\CIS-8-Security\CIS-8-3-7.ps1
• Checks\CIS-8-Security\CIS-8-50.ps1
• Checks\CIS-9-Storage\CIS-9-3-11.ps1
• Collectors\MicrosoftGraph\GuestUsers.ps1
• Collectors\ResourceGraph\FileShare.ps1
• Collectors\ResourceGraph\SQLAudit.ps1
• Private\Test-ArEnvironment.ps1
• Checks\CIS-3-Compute\CIS-3-17.ps1
• Checks\CIS-3-Compute\CIS-3-40.ps1
• Checks\CIS-5-Identity\CIS-5-3-1.ps1
• Checks\CIS-6-Management\CIS-6-1-2-3.ps1
• Checks\CIS-7-Networking\CIS-7-21.ps1
• Checks\CIS-8-Security\CIS-8-1-13.ps1
• Checks\CIS-8-Security\CIS-8-15.ps1
• Checks\CIS-8-Security\CIS-8-3-8.ps1
• Checks\CIS-8-Security\CIS-8-51.ps1
• Checks\CIS-9-Storage\CIS-9-3-12.ps1
• Collectors\MicrosoftGraph\MFARegistration.ps1
• Collectors\ResourceGraph\FirewallPolicy.ps1
• Collectors\ResourceGraph\SQLDatabase.ps1
• Private\Write-Log.ps1
• Checks\CIS-3-Compute\CIS-3-18.ps1
• Checks\CIS-3-Compute\CIS-3-41.ps1
• Checks\CIS-5-Identity\CIS-5-3-2.ps1
• Checks\CIS-6-Management\CIS-6-1-2-4.ps1
• Checks\CIS-7-Networking\CIS-7-22.ps1
• Checks\CIS-8-Security\CIS-8-1-14.ps1
• Checks\CIS-8-Security\CIS-8-16.ps1
• Checks\CIS-8-Security\CIS-8-3-9.ps1
• Checks\CIS-8-Security\CIS-8-52.ps1
• Checks\CIS-9-Storage\CIS-9-3-13.ps1
• Collectors\MicrosoftGraph\SecurityDefaults.ps1
• Collectors\ResourceGraph\FlowLog.ps1
• Collectors\ResourceGraph\SQLDatabaseDetail.ps1
• Public\Connect-ArSession.ps1
• Checks\CIS-3-Compute\CIS-3-19.ps1
• Checks\CIS-3-Compute\CIS-3-42.ps1
• Checks\CIS-5-Identity\CIS-5-3-3.ps1
• Checks\CIS-6-Management\CIS-6-1-2-5.ps1
• Checks\CIS-7-Networking\CIS-7-23.ps1
• Checks\CIS-8-Security\CIS-8-1-15.ps1
• Checks\CIS-8-Security\CIS-8-17.ps1
• Checks\CIS-8-Security\CIS-8-30.ps1
• Checks\CIS-8-Security\CIS-8-53.ps1
• Checks\CIS-9-Storage\CIS-9-3-2-1.ps1
• Collectors\ResourceGraph\ActivityLogAlert.ps1
• Collectors\ResourceGraph\FrontDoor.ps1
• Collectors\ResourceGraph\SQLFirewall.ps1
• Public\Disconnect-ArSession.ps1
• Checks\CIS-3-Compute\CIS-3-2.ps1
• Checks\CIS-3-Compute\CIS-3-43.ps1
• Checks\CIS-5-Identity\CIS-5-3-4.ps1
• Checks\CIS-6-Management\CIS-6-1-2-6.ps1
• Checks\CIS-7-Networking\CIS-7-24.ps1
• Checks\CIS-8-Security\CIS-8-1-16.ps1
• Checks\CIS-8-Security\CIS-8-18.ps1
• Checks\CIS-8-Security\CIS-8-31.ps1
• Checks\CIS-8-Security\CIS-8-54.ps1
• Checks\CIS-9-Storage\CIS-9-3-2-2.ps1
• Collectors\ResourceGraph\AppGateway.ps1
• Collectors\ResourceGraph\KeyVault.ps1
• Collectors\ResourceGraph\SQLServer.ps1
• Public\Invoke-ArAudit.ps1
• Checks\CIS-3-Compute\CIS-3-20.ps1
• Checks\CIS-3-Compute\CIS-3-44.ps1
• Checks\CIS-5-Identity\CIS-5-3-5.ps1
• Checks\CIS-6-Management\CIS-6-1-2-7.ps1
• Checks\CIS-7-Networking\CIS-7-25.ps1
• Checks\CIS-8-Security\CIS-8-1-2-1.ps1
• Checks\CIS-8-Security\CIS-8-19.ps1
• Checks\CIS-8-Security\CIS-8-32.ps1
• Checks\CIS-8-Security\CIS-8-55.ps1
• Checks\CIS-9-Storage\CIS-9-3-2-3.ps1
• Collectors\ResourceGraph\AppService.ps1
• Collectors\ResourceGraph\LoadBalancer.ps1
• Collectors\ResourceGraph\SQLTDE.ps1
• Public\Invoke-ArExport.ps1
• Checks\CIS-3-Compute\CIS-3-21.ps1
• Checks\CIS-3-Compute\CIS-3-45.ps1
• Checks\CIS-5-Identity\CIS-5-3-6.ps1
• Checks\CIS-6-Management\CIS-6-1-2-8.ps1
• Checks\CIS-7-Networking\CIS-7-26.ps1
• Checks\CIS-8-Security\CIS-8-1-3-1.ps1
• Checks\CIS-8-Security\CIS-8-2-1.ps1
• Checks\CIS-8-Security\CIS-8-33.ps1
• Checks\CIS-8-Security\CIS-8-56.ps1
• Checks\CIS-9-Storage\CIS-9-3-3-1.ps1
• Collectors\ResourceGraph\AppServiceSlot.ps1
• Collectors\ResourceGraph\Locks.ps1
• Collectors\ResourceGraph\SQLThreatDetection.ps1
• Checks\CIS-2-Analytics\CIS-2-1-1.ps1
• Checks\CIS-3-Compute\CIS-3-22.ps1
• Checks\CIS-3-Compute\CIS-3-46.ps1
• Checks\CIS-5-Identity\CIS-5-3-7.ps1
• Checks\CIS-6-Management\CIS-6-1-2-9.ps1
• Checks\CIS-7-Networking\CIS-7-27.ps1
• Checks\CIS-8-Security\CIS-8-1-3-2.ps1
• Checks\CIS-8-Security\CIS-8-20.ps1
• Checks\CIS-8-Security\CIS-8-34.ps1
• Checks\CIS-8-Security\CIS-8-57.ps1
• Checks\CIS-9-Storage\CIS-9-3-4.ps1
• Collectors\ResourceGraph\ASG.ps1
• Collectors\ResourceGraph\LogAnalyticsWorkspace.ps1
• Collectors\ResourceGraph\SQLVulnAssessment.ps1
• Checks\CIS-2-Analytics\CIS-2-1-10.ps1
• Checks\CIS-3-Compute\CIS-3-23.ps1
• Checks\CIS-3-Compute\CIS-3-47.ps1
• Checks\CIS-5-Identity\CIS-5-4.ps1
• Checks\CIS-6-Management\CIS-6-1-3-1.ps1
• Checks\CIS-7-Networking\CIS-7-28.ps1
• Checks\CIS-8-Security\CIS-8-1-3-3.ps1
• Checks\CIS-8-Security\CIS-8-21.ps1
• Checks\CIS-8-Security\CIS-8-35.ps1
• Checks\CIS-8-Security\CIS-8-58.ps1
• Checks\CIS-9-Storage\CIS-9-3-5.ps1
• Collectors\ResourceGraph\AzureFirewall.ps1
• Collectors\ResourceGraph\LogicApp.ps1
• Collectors\ResourceGraph\StorageAccount.ps1
• Checks\CIS-2-Analytics\CIS-2-1-11.ps1
• Checks\CIS-3-Compute\CIS-3-24.ps1
• Checks\CIS-3-Compute\CIS-3-48.ps1
• Checks\CIS-5-Identity\CIS-5-5.ps1
• Checks\CIS-6-Management\CIS-6-1-4.ps1
• Checks\CIS-7-Networking\CIS-7-29.ps1
• Checks\CIS-8-Security\CIS-8-1-3-4.ps1
• Checks\CIS-8-Security\CIS-8-22.ps1
• Checks\CIS-8-Security\CIS-8-36.ps1
• Checks\CIS-8-Security\CIS-8-59.ps1
• Checks\CIS-9-Storage\CIS-9-3-6.ps1
• Collectors\ResourceGraph\AzurePolicy.ps1
• Collectors\ResourceGraph\MySQL.ps1
• Collectors\ResourceGraph\Tags.ps1
• Checks\CIS-2-Analytics\CIS-2-1-12.ps1
• Checks\CIS-3-Compute\CIS-3-25.ps1
• Checks\CIS-3-Compute\CIS-3-49.ps1
• Checks\CIS-5-Identity\CIS-5-6.ps1
• Checks\CIS-6-Management\CIS-6-1-5.ps1
• Checks\CIS-7-Networking\CIS-7-3.ps1
• Checks\CIS-8-Security\CIS-8-1-3-5.ps1
• Checks\CIS-8-Security\CIS-8-23.ps1
• Checks\CIS-8-Security\CIS-8-37.ps1
• Checks\CIS-8-Security\CIS-8-6.ps1
• Checks\CIS-9-Storage\CIS-9-3-7.ps1
• Collectors\ResourceGraph\BackupItem.ps1
• Collectors\ResourceGraph\MySQLConfig.ps1
• Collectors\ResourceGraph\VirtualMachine.ps1
• Checks\CIS-2-Analytics\CIS-2-1-2.ps1
• Checks\CIS-3-Compute\CIS-3-26.ps1
• Checks\CIS-3-Compute\CIS-3-5.ps1
• Checks\CIS-5-Identity\CIS-5-7.ps1
• Checks\CIS-6-Management\CIS-6-2.ps1
• Checks\CIS-7-Networking\CIS-7-30.ps1
• Checks\CIS-8-Security\CIS-8-1-4-1.ps1
• Checks\CIS-8-Security\CIS-8-24.ps1
• Checks\CIS-8-Security\CIS-8-38.ps1
• Checks\CIS-8-Security\CIS-8-60.ps1
• Checks\CIS-9-Storage\CIS-9-3-8.ps1
• Collectors\ResourceGraph\BackupPolicy.ps1
• Collectors\ResourceGraph\NATGateway.ps1
• Collectors\ResourceGraph\VMSS.ps1
• Checks\CIS-2-Analytics\CIS-2-1-3.ps1
• Checks\CIS-3-Compute\CIS-3-27.ps1
• Checks\CIS-3-Compute\CIS-3-50.ps1
• Checks\CIS-5-Identity\CIS-5-8.ps1
• Checks\CIS-6-Management\CIS-6-3.ps1
• Checks\CIS-7-Networking\CIS-7-31.ps1
• Checks\CIS-8-Security\CIS-8-1-5-1.ps1
• Checks\CIS-8-Security\CIS-8-25.ps1
• Checks\CIS-8-Security\CIS-8-39.ps1
• Checks\CIS-8-Security\CIS-8-7.ps1
• Checks\CIS-9-Storage\CIS-9-3-9.ps1
• Collectors\ResourceGraph\Bastion.ps1
• Collectors\ResourceGraph\NetworkWatcher.ps1
• Collectors\ResourceGraph\VNet.ps1
• Checks\CIS-2-Analytics\CIS-2-1-4.ps1
• Checks\CIS-3-Compute\CIS-3-28.ps1
• Checks\CIS-3-Compute\CIS-3-51.ps1
• Checks\CIS-5-Identity\CIS-5-9.ps1
• Checks\CIS-6-Management\CIS-6-4.ps1
• Checks\CIS-7-Networking\CIS-7-32.ps1
• Checks\CIS-8-Security\CIS-8-1-5-2.ps1
• Checks\CIS-8-Security\CIS-8-26.ps1
• Checks\CIS-8-Security\CIS-8-4-1.ps1
• Checks\CIS-8-Security\CIS-8-8.ps1
• Checks\CIS-9-Storage\CIS-9-4-1.ps1
• Collectors\ResourceGraph\BlobContainer.ps1
• Collectors\ResourceGraph\NSG.ps1
• Collectors\ResourceGraph\VPNGateway.ps1
• Checks\CIS-2-Analytics\CIS-2-1-5.ps1
• Checks\CIS-3-Compute\CIS-3-29.ps1
• Checks\CIS-3-Compute\CIS-3-52.ps1
• Checks\CIS-6-Management\CIS-6-1-1-1.ps1
• Checks\CIS-7-Networking\CIS-7-1.ps1
• Checks\CIS-7-Networking\CIS-7-33.ps1
• Checks\CIS-8-Security\CIS-8-1-6-1.ps1
• Checks\CIS-8-Security\CIS-8-27.ps1
• Checks\CIS-8-Security\CIS-8-40.ps1
• Checks\CIS-8-Security\CIS-8-9.ps1
• Checks\CIS-9-Storage\CIS-9-4-2.ps1
• Collectors\ResourceGraph\BlobService.ps1
• Collectors\ResourceGraph\Peering.ps1
• Collectors\ResourceGraph\WAFPolicy.ps1
• Checks\CIS-2-Analytics\CIS-2-1-6.ps1
• Checks\CIS-3-Compute\CIS-3-3.ps1
• Checks\CIS-3-Compute\CIS-3-53.ps1
• Checks\CIS-6-Management\CIS-6-1-1-2.ps1
• Checks\CIS-7-Networking\CIS-7-10.ps1
• Checks\CIS-7-Networking\CIS-7-34.ps1

Version History