Loading
PS Script
5/6 checks passed
Updated Dec 2025Intune Log Collector
Intune Log Collector is an Azure-based solution that collects logs from Intune-managed devices, including files, directories, and event logs. It deploys a Function App, Storage Account, and Key Vault, with the Remediation script driving log collection per LogsGatherRules.json and uploading a compressed archive to the logs container. Deployments support Azure Template Spec (Bicep/ARM) or direct ARM templates, with optional UI and post-deployment steps.
Works with
WindowsmacOSGraph APIAzure Automation
Screenshots
Security Analysis
5of 6
1 Issue Found
12 files scanned on Sep 20, 2026
Issues Detected
No Data Exfiltration
No suspicious outbound data transfers
Generates and returns a SAS token with read/write access for the storage container using a stored policy. If leaked, the token could allow unauthorized access to logs. Risk mitigations include tightening token scope, reducing lifetime, and avoiding returning tokens in API responses unless required.
Passed Checks
No Obfuscated Code
No Remote Execution
No Credential Theft
No Malicious Patterns
No Hardcoded Secrets
AI Analysis
Overall assessment: The code implements legitimate Intune/Graph-based device authentication and blob/log handling patterns. Notable security considerations include potential data exposure through blob content returned in responses and logs, plus SAS token distribution that could be misused if leaked. No obfuscated or remote-code execution patterns detected. Recommend tightening logging of sensitive fields, validating blob content exposure boundaries, and ensuring SAS tokens are minimally scoped and time-bounded.
You might also like
PS Script
Petri Paavola
Intune Device Details GUI
A PowerShell-based GUI tool for visualizing comprehensive Intune device information. Shows Azure AD group memberships, Intune filter assignments, application and configuration targeting, BitLocker recovery keys, LAPS passwords, Autopilot profiles, and remediation script status with color-coded assignment states.
Petri PaavolaPS Script
Mert Efe Kanlikilic
Intune Remote Help Launcher
Intune Remote Help Launcher is a PowerShell WPF tool for IT admins to search Intune-managed devices by name or primary user, view device details, and launch Microsoft Remote Help sessions from one interface. It supports Windows, Android, iOS, and macOS devices, displays OS, compliance, ownership, model and last sync, and can issue sync or restart commands or open the device in the Intune admin center. It uses Microsoft Graph delegated authentication (auto-installs the Graph module if needed) and requires Remote Help licensing to be configured.
Mert Efe KanlikilicPS Script
Jannik Reinhard
Endpoint Analytics Remediation Scripts
A community-driven repository of 86+ PowerShell detection and remediation scripts for Microsoft Intune Endpoint Analytics. Includes scripts for system health, security hardening, device management, application management, optimization, and diagnostics.
Jannik ReinhardPS Script
Andrew Taylor
Get-AutopilotDiagnosticsCommunity
A PowerShell diagnostic script for analyzing Windows Autopilot deployments. Provides comprehensive details about Autopilot profile settings, policies, apps, and certificate profiles tracked via Enrollment Status Page, with support for local PC analysis and captured log files.
Andrew Taylor