Skip to content
PowerShell Module
5/6 checks passed

Intune-App-Sandbox

Intune-App-Sandbox is a testing utility for PowerShell-based installers packaged with the Win32 Content Prep Tool for Intune deployments. It creates a sandbox workspace (C:\SandboxEnvironment), and adds context-menu options to pack with IntunewinUtil or run tests in a Safe sandbox. It also supports a detection-based test flow and a reusable template script to accelerate building and validating packaging for Win32 apps in Intune.

Works with
WindowsWin32 Apps
DownloadView on GitHub

Screenshots

1 / 2

Swipe to see more

Security Analysis

5of 6
1 Issue Found

10 files scanned on Jul 12, 2026

Issues Detected
No Obfuscated Code
No base64 encoded commands or hidden scripts
Module manifest appears garbled with binary-like characters; potential obfuscation or tampering. This hinders auditing and may indicate attempted concealment. Validate integrity and authorship of the manifest.
Passed Checks
No Remote Execution
No Credential Theft
No Data Exfiltration
No Malicious Patterns
No Hardcoded Secrets
AI Analysis

The Intune-App-Sandbox codebase is aligned with legitimate Intune/Win32 sandbox deployment practices but contains notable security considerations. A garbled manifest in Intune-App-Sandbox.psd1 suggests potential tampering or obfuscation. Privilege-escalation patterns (executionpolicy bypass and SYSTEM-level scheduled task) exist in the logon scripting flow. Sandbox host-folder mappings allow write access to host data, creating data exfiltration risks. The code also collects installed software data inside the sandbox. No hardcoded secrets detected; no external remote code downloads observed. Recommend validating the PSD1 file integrity, restricting sandbox privilege elevations, and tightening sandbox host mappings; document all data collection and ensure proper logging and least-privilege usage.

You might also like

PowerShell Module

Wintuner

WinTuner is a tool that lets you take any WinGet app and upload it to Intune in minutes. It automates downloading the installer and logo, generates the intunewin package, creates the required deployment script details, and publishes the app to Intune. It also ships a PowerShell module for automation and includes documentation to guide you through the process.

Stephan van RooijStephan van Rooij
PowerShell Module

IntuneWinAppUtil GUI

IntuneWinAppUtil GUI is a PowerShell-based WPF wrapper for Microsoft's IntuneWinAppUtil.exe. It streamlines packaging Win32 apps for Intune with auto-download of the latest tool, input validation, path-length checks, and configuration persistence across launches. It also detects PSAppDeployToolkit usage to suggest names and sanitizes invalid filename characters.

Giovanni SoloneGiovanni Solone
PowerShell Module

IntuneWin32App

A PowerShell module for managing the complete lifecycle of Win32 applications in Microsoft Intune. Features 40+ functions for packaging, publishing, detection rules, requirement rules, assignments, dependencies, and supersedence with support for x64, x86, and ARM64 architectures.

Nickolaj AndersenNickolaj Andersen
PowerShell Module

win32-toolkit

win32-toolkit delivers end-to-end Intune Win32 packaging: point at a winget package or any installer, scaffold a PSAppDeployToolkit v4 project, and capture real installs in a disposable Windows Sandbox or Hyper-V VM. It derives detection and uninstall logic, validates install/update paths, packages a .intunewin, and publishes to Intune with dependencies, branding, and requirements.

Maxime GuilleminMaxime Guillemin