Endpoint Analytics Remediation Scripts
A community-driven repository of 86+ PowerShell detection and remediation scripts for Microsoft Intune Endpoint Analytics. Includes scripts for system health, security hardening, device management, application management, optimization, and diagnostics.
Screenshots
1 / 5Swipe to see more
Security Analysis
50 files scanned on Aug 16, 2026
The codebase consists largely of template and remediation scripts with placeholders and some potentially destructive operations. No evidence of obfuscated payload, remote script execution, credential theft, data exfiltration, or hardcoded secrets. However, several templates include placeholders and a potentially risky remediation that can affect hardware and registry state. Recommend auditing templates, removing or clearly gating placeholder logic, adding input validation, and ensuring destructive actions (like pnputil usage) are behind explicit confirmations and logging.
You might also like
Intune Remediations
A collection of PowerShell detection and remediation scripts for Microsoft Intune. Organized into categories: Device Compliance, Device Configuration, Device Performance, Microsoft Defender AV, Miscellaneous, Reporting, and Toast Notifications for proactive endpoint issue resolution.
Get-IntuneManagementExtensionDiagnostics
A PowerShell script for analyzing Intune Management Extension logs and creating timeline reports. Tracks Win32App deployments, WinGetApp packages, PowerShell scripts, Proactive Remediations, Custom Compliance, and Autopilot ESP phases with HTML reports and integrated LogViewerUI.
Get-AutopilotDiagnosticsCommunity
A PowerShell diagnostic script for analyzing Windows Autopilot deployments. Provides comprehensive details about Autopilot profile settings, policies, apps, and certificate profiles tracked via Enrollment Status Page, with support for local PC analysis and captured log files.
Intune Device Details GUI
A PowerShell-based GUI tool for visualizing comprehensive Intune device information. Shows Azure AD group memberships, Intune filter assignments, application and configuration targeting, BitLocker recovery keys, LAPS passwords, Autopilot profiles, and remediation script status with color-coded assignment states.