This module contains resources used to audit system settings/verify compliance.

This module is designed to modify Windows security options (Local Security Policy Administrative Tool). The Local Security Policy is responsible for managing many of the security features of Windows. This module is built to manage the following commponents: -User Rights Assignment (v1.0) -Advance... More info

A free, open-source forensics PowerShell module for conducting incident response and threat hunting of Microsoft Cloud environments. Hawk streamlines the collection of forensic data from Microsoft 365 and Entra ID environments to help security professionals, incident responders, and administrators quickly gather critical log data and id... More info

DSCEA is a scanning engine for processing Test-DSCConfiguration results that provides the ability to scan an environment for compliance against a defined PowerShell DSC configuration. Visit https://microsoft.github.io/DSCEA for more information.

Audit and block PowerShell scripts on Windows machines.

Tasks for auditing Active Directory

Office 365 Troubleshooters module has been designed to help Office 365 Administrators to do troubleshooting on Office 365 services. The module will be monthly updated with new features and improve existing ones. The project is available at https://github.com/vilega/O365Troubleshooters PowerShell 7 is not supported as some Office 365 connections... More info

This modules provides Cmdlets for OCI Audit Service

Module that replaces auditpol.exe with a custom version that can be used to audit or make changes to the Windows Security Policy.

A DSC resource for hardening Windows OS

Contains functions for parsing SDDL descriptors.

ConfigMgr healthcheck reporting

Powershell resource for hardening Windows Server OS

Various Azure related functions. Some of them are explained at https://doitpsway.com/series/azure. This module has been DEPRECATED, because it is based on AzureAD module. Use AzureStuff module instead (built upon Microsoft.Graph.* and AZ modules instead).

This script will generate a HTML file to list all inactive users and the last logon of users based on the audit log. Inactive users will normally be collected using the users mailbox but external and users without a license don't have a mailbox. We will be using the audit log to find successful and failed logons for internal users and page viewes f... More info

This module uses PSWriteWord and PSGraph modules and GraphViz repository. It creates full Active Directory Organisational Audit.

Various Azure related functions focused on authentication etc. More details at https://doitpshway.com/series/azure. Some of the interesting functions: - Connect-AzAccount2 - proxy function for Connect-AzAccount, but supports reusing the existing session - Connect-PnPOnline2 - proxy function for Connect-PnPOnline with some enhancements like: auto... More info

Simple logging module for PowerShell, built for simplicity and usability.

Microsoft 365 Incident Response and Threat Hunting PowerShell tool. Osprey is designed to ease the burden on M365 administrators who are performing Cloud forensic tasks for their organization. It accelerates the gathering of data from multiple sources in the service that be used to quickly identify malicious presence and activity.

A module for running various Active Directory Tasks