This module contains resources used to audit system settings/verify compliance.

🔔 THIS MODULE IS DEPRECATED. 💗 Please use the new Harden System Security app, available on Microsoft Store, that has 100% of the features of the module, plus so much more. It's open source as well. ➡️ https://github.com/HotCakeX/Harden-Windows-Security/wiki/Harden-System-Security 💞 Microsoft Store link: ➡️ https://apps.microsoft.com/deta... More info

A free, open-source forensics PowerShell module for conducting incident response and threat hunting of Microsoft Cloud environments. Hawk streamlines the collection of forensic data from Microsoft 365 and Entra ID environments to help security professionals, incident responders, and administrators quickly gather critical log data and id... More info

EasyPIM simplifies Microsoft PIM management by abstracting complex Graph and ARM APIs into intuitive PowerShell cmdlets. Overcome portal limitations with bulk operations, export/import policies across tenants, manage Azure RBAC and Entra roles using friendly role names instead of GUIDs, track changes with interactive HTML reports, and automate what... More info

Enterprise driver and Windows update management for Dell, Lenovo, and Intel endpoints. Supports individual driver updates, full pack reinstalls, Windows cumulative updates, update blocking/approval workflows, driver rollback, and offline catalog support.

This PowerShell script connects to Microsoft Graph API and generates a comprehensive interactive HTML report that identifies various anomalies and potential issues in your Microsoft Intune environment. The script performs deep analysis of managed Windows devices and provides actionable insights for IT administrators to maintain optimal device manag... More info

Comprehensive read-only Microsoft 365 security assessment tool for IT consultants and administrators. Covers Entra ID, Exchange Online, Intune, Defender, SharePoint, Teams, Purview, and Active Directory.

Audits Microsoft Entra ID (Azure AD) tenant settings against configurable compliance rules.

A comprehensive PowerShell toolkit for RDP forensics analysis, tracking connection attempts, authentication, sessions, and logoffs across Windows Event Logs for security monitoring and incident response.

Universal Policy Engine for Security Auditing and Enforcement. Supports MacroLevel filtering, Registry/Service/Feature rules, and comprehensive compliance reporting.

Microsoft 365 tenant security baseline audit. Checks MFA enrollment, Conditional Access policies, mailbox forwarding rules, and guest account hygiene. Generates HTML dashboard reports. Requires Microsoft.Graph and ExchangeOnlineManagement modules.

NTFS file and share permission auditing for compliance. Reports on direct user ACEs, broken inheritance, deeply nested groups, and overly permissive shares. Generates HTML dashboard reports for SOC2, HIPAA, and cyber insurance reviews.

Microsoft Intune compliance and device management reporting. Audits device compliance status, app inventory, policy assignment gaps, and Autopilot readiness. Generates HTML dashboard reports. Requires the Microsoft.Graph PowerShell SDK.

Infrastructure change tracking across AD, GPO, DNS, and server configurations. Answers "who changed what and when" instantly.

Service account security auditing. Discovers service accounts across servers, reports on password age, privileged group membership, SPNs, and identifies accounts with no documented owner. Generates HTML dashboard reports. Requires ActiveDirectory RSAT module.

PowerShell Module for managing and implementing the Dutch Baseline for Secure Cloud via Microsoft Intune. Provides comprehensive device hardening, security baseline deployment, and compliance management for Microsoft 365 environments.

AI-powered PowerShell module for managing and analyzing Microsoft 365 Conditional Access policies with Zero Trust security baseline, comprehensive gap analysis, and multi-agent AI security advisory

Living documentation system for IT environments. Feed in old docs, AI extracts verifiable facts, PowerShell checks them against reality. Keeps documentation accurate forever.

Automatically tag VMware vSphere and Microsoft Hyper-V VMs with OS, hardware tier, compliance status, and custom categories. Pull VM metadata and apply vSphere tags or store tags as JSON in Hyper-V VM Notes for easy filtering and search. Supports custom YAML tag profiles, compliance checking, stale VM detection, drift detection, and HTML dashboards... More info

An AsBuiltReport module used to document Microsoft Purview compliance configuration.