IntuneDeviceInventory
A PowerShell module with UI for extending Microsoft Intune device management. Adds custom properties to Intune devices, enables bulk operations including device sync and BitLocker key rotation, with both PowerShell module and standalone UI interfaces.
Security Analysis
37 files scanned on Aug 16, 2026
The IntuneDeviceInventory toolset contains legitimate Intune Graph integration patterns, but also notable security risks. Key concerns include obfuscated manifest/script content that hampers review, a privileged permission grant for a managed identity that could be misused, webhook-driven device-note updates that could be abused if authentication is weak, plaintext credential handling risks in Graph connection, and telemetry collection that could leak sensitive inventory data if not properly controlled. Recommend re-encoding/ signing the obfuscated modules, validating input/output strictly, enforcing least privilege, securing webhook authentication, and adopting safer authentication mechanisms (certificate/Managed Identity) where possible.
You might also like
Device Offboarding Manager
A PowerShell-based GUI application for streamlined device lifecycle management across Microsoft cloud services. Enables bulk device offboarding from Intune, Autopilot, and Entra ID from a single interface. Features real-time dashboard analytics, stale device tracking, automatic BitLocker and FileVault key retrieval, CSV/TXT import for bulk operations, and pre-built playbooks for automated workflows.
Ugur KocIntune Hydration Kit
A PowerShell module that automates Microsoft Intune tenant setup by deploying 70+ security baselines, 43 dynamic groups, 24 device filters, compliance policies, app protection policies, and Conditional Access policies in a single command. Integrates OpenIntuneBaseline and supports multi-cloud environments.
Jorge SuarezOSD
A comprehensive PowerShell module for operating system deployment with 400+ functions for WinPE and Windows. Includes OSDCloud for cloud-based deployment, disk management, Windows image operations, driver management for Dell, HP, Lenovo, and Microsoft, BIOS/firmware updates, BitLocker management, and WinPE customization.
David SeguraEntra ID Device Trust
Entra ID Device Trust enables binding Function Apps to Entra ID joined devices by validating requests originate from trusted devices via the device certificate enrolled during device registration. It combines client-side data gathering (signature hash, device CN, public key, thumbprint) with server-side validation, and can be embedded as a module in your Function App or installed as a dependency. The solution supports embedding EntraIDDeviceTrust.Client on clients and EntraIDDeviceTrust.FunctionApp in Function Apps for seamless, enhanced request security.
Nickolaj Andersen