A lightweight PowerShell module to handle Azure authentication, using the Azure.Identity MSAL library.

Service account security auditing. Discovers service accounts across servers, reports on password age, privileged group membership, SPNs, and identifies accounts with no documented owner. Generates HTML dashboard reports. Requires ActiveDirectory RSAT module.

Audit Kerberos posture in Active Directory: unconstrained delegation, duplicate SPNs and AS-REP roastable accounts.

Kerberos authentication audit toolkit — ticket cache, SPN inventory, delegation analysis, and Kerberos policy validation