Predicts which accounts, services and clients a Kerberos encryption type hardening change will break, before the change is made. Collects events 4768, 4769 and 4771 from domain controllers or archived logs, decodes ticket encryption types and msDS-SupportedEncryptionTypes bitmasks, correlates observed behaviour against directory configuration and d... More info

Seeds a realistic identity test environment in Entra ID, Active Directory, Okta, Authentik or FreeIPA - users in every lifecycle state, groups, devices and hosts, and the access policy over them - and tears it down again cleanly, proving ownership of every object before deleting it. One connect-seed-report-teardown surface for all five, no module d... More info

Predicts Entra Conditional Access sign-in outcomes before report-only policies go live

Test Intune scripts before Intune does: static rules, a runtime harness, Pester assertions, a Graph pre-flight over the tenant's deployed scripts and readers for the agent's logs