A PowerShell toolbox for Microsoft 365 security fans.

Automatic Documentation of M365 to simplify the life of admins and consultants.

Automatic Intune and Conditional Access Documentation to simplify the life of admins and consultants.

This script documents Azure AD Conditional Access Policies.

Azure Runbook - Dynamic Group - MFA State This script is designed for an Azure Runbook to assign users to two Azure AD groups based on their MFA capability (capable / non-capable). Before running the runbook, you need to set up an automation account with a managed identity. The managed identity requires the following Graph Permissions: - User.... More info

The `Get-ConditionalAccessNamedIP` function retrieves IP addresses from named locations in Conditional Access policies. You can filter the results based on whether the location is trusted or untrusted. Get-ConditionalAccessNamedIP -IsTrusted # Retrieves IP addresses from trusted named locations.