Back to all tools
PowerShell ModulePackaging

Intune-App-Sandbox

Intune-App-Sandbox is a testing utility for PowerShell-based installers packaged with the Win32 Content Prep Tool for Intune deployments. It creates a sandbox workspace (C:\SandboxEnvironment), and adds context-menu options to pack with IntunewinUtil or run tests in a Safe sandbox. It also supports a detection-based test flow and a reusable template script to accelerate building and validating packaging for Win32 apps in Intune.

Works with
WindowsWin32 Apps
Created by
Maciej Horbacz
Maciej Horbacz
GitHubDownload

Security Analysis

5of 6
1 Issue Found

10 files scanned on Jun 11, 2026

Issues Detected
No Malicious Patterns
No known malware techniques
The generated logon script creates a scheduled task that runs an installer as SYSTEM after a short delay. This pattern can enable privilege escalation and persistence; within a sandbox this may be expected but could be misused outside containment.
Passed Checks
No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Hardcoded Secrets
AI Analysis

The codebase implements a Windows Sandbox workflow for Intune app testing. While much is standard for admin tooling (sandbox config, PSADT-based packaging, toast notifications), there are notable security concerns: garbled/obfuscated manifest, execution policy bypass in pre-logon, a SYSTEM-level scheduled task to perform installation, data enumeration/export, and dynamic loading of Public modules. These patterns require strict supply-chain controls, code signing, and minimized exposure to ensure no misuse outside controlled Intune management contexts.

Screenshots1 / 2

Swipe to see more

You might also like

PowerShell Module

Wintuner

WinTuner is a tool that lets you take any WinGet app and upload it to Intune in minutes. It automates downloading the installer and logo, generates the intunewin package, creates the required deployment script details, and publishes the app to Intune. It also ships a PowerShell module for automation and includes documentation to guide you through the process.

Stephan van RooijStephan van Rooij
PowerShell Module

IntuneWinAppUtil GUI

IntuneWinAppUtil GUI is a PowerShell-based WPF wrapper for Microsoft's IntuneWinAppUtil.exe. It streamlines packaging Win32 apps for Intune with auto-download of the latest tool, input validation, path-length checks, and configuration persistence across launches. It also detects PSAppDeployToolkit usage to suggest names and sanitizes invalid filename characters.

Giovanni SoloneGiovanni Solone
PowerShell Module

IntuneWin32App

A PowerShell module for managing the complete lifecycle of Win32 applications in Microsoft Intune. Features 40+ functions for packaging, publishing, detection rules, requirement rules, assignments, dependencies, and supersedence with support for x64, x86, and ARM64 architectures.

Nickolaj AndersenNickolaj Andersen
PowerShell Module

WinGet-PSADT-GUI-Tool

WinGet-PSADT-GUI-Tool is a Windows PowerShell WPF GUI that streamlines Win32 app packaging and Intune deployment. It integrates WinGet search, installer download, PSADT scaffolding, and GUI-driven configuration of install/uninstall/repair logic, enabling generation of .intunewin packages and direct upload to Intune via Microsoft Graph. It outputs standard PSADT/Intune artifacts and provides live monitoring of packaging and upload steps.

Dhiraj DhoteDhiraj Dhote