Intune Log Collector
Intune Log Collector is an Azure-based solution that collects logs from Intune-managed devices, including files, directories, and event logs. It deploys a Function App, Storage Account, and Key Vault, with the Remediation script driving log collection per LogsGatherRules.json and uploading a compressed archive to the logs container. Deployments support Azure Template Spec (Bicep/ARM) or direct ARM templates, with optional UI and post-deployment steps.
Screenshots
Security Analysis
12 files scanned on Jul 12, 2026
Overall assessment: The Intune Log Collector code is functionally appropriate and includes authentication checks and storage access controls. However, there are notable security concerns around storage credentials in environment variables, and the SAS token workflow with broad permissions could be misused if tokens are intercepted. Data exposure via blob contents and metadata in logs also warrants tightening. Recommendations include migrating storage access to Managed Identity/Key Vault, tightening SAS token scope and TTL, limiting data exposure, and ensuring logs redact sensitive identifiers by default.
You might also like
Intune Device Details GUI
A PowerShell-based GUI tool for visualizing comprehensive Intune device information. Shows Azure AD group memberships, Intune filter assignments, application and configuration targeting, BitLocker recovery keys, LAPS passwords, Autopilot profiles, and remediation script status with color-coded assignment states.
Petri PaavolaIntune Remote Help Launcher
Intune Remote Help Launcher is a PowerShell WPF tool for IT admins to search Intune-managed devices by name or primary user, view device details, and launch Microsoft Remote Help sessions from one interface. It supports Windows, Android, iOS, and macOS devices, displays OS, compliance, ownership, model and last sync, and can issue sync or restart commands or open the device in the Intune admin center. It uses Microsoft Graph delegated authentication (auto-installs the Graph module if needed) and requires Remote Help licensing to be configured.
Mert Efe KanlikilicEndpoint Analytics Remediation Scripts
A community-driven repository of 86+ PowerShell detection and remediation scripts for Microsoft Intune Endpoint Analytics. Includes scripts for system health, security hardening, device management, application management, optimization, and diagnostics.
Jannik ReinhardGet-AutopilotDiagnosticsCommunity
A PowerShell diagnostic script for analyzing Windows Autopilot deployments. Provides comprehensive details about Autopilot profile settings, policies, apps, and certificate profiles tracked via Enrollment Status Page, with support for local PC analysis and captured log files.
Andrew Taylor