Loading
PS Script
5/6 checks passed
Updated Sep 2026Edge Extension Inventory Collector
Edge Extension Inventory Collector is a lightweight tool that scans endpoints to enumerate installed Microsoft Edge extensions, capturing extension ID, name, publisher, version, enabled state, and install source. It exports a consolidated inventory to JSON or CSV for software asset management, security audits, and Intune/Endpoint Manager workflows. It helps maintain visibility of browser extensions across managed devices and supports baseline compliance checks.
Security Analysis
5of 6
1 Issue Found
10 files scanned on Sep 20, 2026
Issues Detected
No Hardcoded Secrets
No API keys or credentials in code
Hardcoded credentials in configuration: TenantId, ClientId and ClientSecret are defined in the Config hash with placeholder values. This enables credential access if the script is accessed or stored insecurely. Recommend using a secure secret store (e.g., Azure Key Vault or Automation Variables with secret protection) and injecting secrets at runtime rather than embedding them in code.
Passed Checks
No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Malicious Patterns
AI Analysis
The codebase largely follows expected Intune/Entra admin patterns (Graph API usage, service health reporting, automated emails). Security concerns are primarily around hardcoded secrets and placeholders embedded in scripts (high/medium severity) and potential exposure of sensitive data via generated reports (medium). Immediate improvements include removing hardcoded credentials, centralizing secrets (Key Vault / automation-secure variables), and verifying access controls around generated reports and logs.
You might also like
PS Script
Basetune
Basetune is a PowerShell-based tool that compares Intune Settings Catalog and Security Baseline policies across tenants or offline baselines. It supports online Graph API access or offline JSON exports, with local caching of policies and setting definitions to enable offline comparisons. Configure multiple tenants/baselines and run source-vs-target comparisons from the UI or CLI, producing HTML and CSV reports with friendly display names.
R
RoweskiPowerShell Module
Mark Oldham
IntuneAccess
IntuneAccess is an open-source, read-only PowerShell module that connects Microsoft Intune RBAC, workload targeting, and evidence into a single local report. It correlates admins, groups, policies, devices, apps and updates to produce structured objects and an offline HTML Signal Atlas explorer. It supports findings, resolution guides, snapshot comparisons and export-only datasets without uploading tenant data.
Mark OldhamPS Script
Roy Klooster
Intune Anomalies Report
A PowerShell script for comprehensive analysis and reporting of Microsoft Intune environment anomalies. Identifies application failures, multi-user devices, BitLocker status, Autopilot hash issues, inactive devices, compliance violations, OS edition overview, and disabled user accounts.
Roy KloosterPS Script
Ugur Koc
Intune Assignment Checker
A PowerShell-based auditing tool for IT administrators managing Microsoft Intune. Provides comprehensive analysis of policy, app, and configuration assignments across users, groups, and devices. Features include assignment verification, policy discovery, empty group detection, HTML report generation with charts and dark/light mode, CSV export, and support for multiple authentication methods including certificate-based automation.
Ugur Koc