This module contains resources used to audit system settings/verify compliance.

This module is designed to modify Windows security options (Local Security Policy Administrative Tool). The Local Security Policy is responsible for managing many of the security features of Windows. This module is built to manage the following commponents: -User Rights Assignment (v1.0) -Advance... More info

A free, open-source forensics PowerShell module for conducting incident response and threat hunting of Microsoft Cloud environments. Hawk streamlines the collection of forensic data from Microsoft 365 and Entra ID environments to help security professionals, incident responders, and administrators quickly gather critical log data and id... More info

DSCEA is a scanning engine for processing Test-DSCConfiguration results that provides the ability to scan an environment for compliance against a defined PowerShell DSC configuration. Visit https://microsoft.github.io/DSCEA for more information.

M365Permissions - Microsoft 365 & Azure Permission Scanner For the enterprise Azure-native version, see https://www.m365permissions.com This module reports on permissions across SharePoint, Entra ID, Exchange Online, OneDrive, Power BI, Power Platform, Azure RBAC, and Azure DevOps. INSTALLATION: Install-PSResource -Name M365Permission... More info

Various Azure related functions focused on authentication etc. More details at https://doitpshway.com/series/azure. Some of the interesting functions: - Connect-AzAccount2 - proxy function for Connect-AzAccount, but supports reusing the existing session - Connect-PnPOnline2 - proxy function for Connect-PnPOnline with some enhancements like: auto... More info

PowerShell Cmdlets to manage Windows audit setting (instead of using Auditpol)

Comprehensive read-only Microsoft 365 security assessment tool for IT consultants and administrators. Covers Entra ID, Exchange Online, Intune, Defender, SharePoint, Teams, Purview, and Active Directory.

AzureLocalRanger performs automated, read-only discovery and reporting against Azure Local (formerly Azure Stack HCI) clusters. It collects cluster topology, storage and networking health, VM workload inventory, security posture, and Azure Arc registration state — then renders HTML, Markdown, JSON, and SVG as-built report packages. Run from any Win... More info