Skip to content
Other
5/6 checks passed

Intune Reporting

Entra ID Groups Inspector is a Log Analytics dashboard that tracks changes to Azure Entra (Azure AD) groups, including creations, deletions, and membership edits. It surfaces audit-log data with built-in visuals, time filters, and export options for security and compliance workflows. Designed for Intune and Entra ID environments, it helps admins quickly validate group governance and access changes.

View on GitHub

Security Analysis

5of 6
1 Issue Found

27 files scanned on Aug 16, 2026

Issues Detected
No Malicious Patterns
No known malware techniques
Automated assignment of Microsoft Graph app roles to a service principal (New-AzureAdServiceAppRoleAssignment) based on listed permissions. This can grant elevated or unintended access to Intune/DeviceManagement data without explicit per-application consent. Recommend least-privilege configuration, require admin consent workflows, and implement robust auditing.
Passed Checks
No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Hardcoded Secrets
AI Analysis

Overall assessment: The codebase largely aligns with legitimate Intune/endpoint management tasks (inventory reporting, Dell BIOS update assessment, and Graph/AzureAD integration). Primary security concerns are (1) automated Graph AppRole assignments that could unintentionally elevate permissions, (2) telemetry that transmits sensitive asset data to an external service requiring governance, and (3) placeholders for credentials that should be supplied securely rather than embedded. No obfuscated code, no hardcoded secrets, and no direct remote code execution detected, though a minor bug risk exists (ModelGUID vs. modelGUID usage in BIOS data processing) that could affect functionality.

You might also like

Other

Dashboard of Windows authentication methods usage (WHfB vs password)

A Log Analytics dashboard to monitor Windows authentication method usage (WHfB vs password) across devices and users. It reads the SigninLogs table to report counts, trends and adoption, showing who uses WHfB, who uses passwords, and how usage evolves over time. It supports filtering by device, user and time, and includes a ready-to-import workbook (Workbook.json) to add the report to a Log Analytics workspace in Intune-managed environments.

D
Damien VAN ROBAEYS
Other

Intune Monitoring

Free, customizable Azure Workbook dashboard templates for monitoring Microsoft Intune environments. Provides real-time visibility into device compliance, enrollment status, application deployments, security posture, and OS updates. Deploys in under 60 seconds with no app registration or custom permissions required. Data remains within your tenant with full customization support for queries, branding, and visualizations.

Daniel RungDaniel Rung +1
Other

Fleetly

An iOS application for managing and monitoring Microsoft Intune-enrolled devices on the go. Features Azure AD authentication, real-time device inventory across all platforms, remote actions (sync, restart, lock, wipe), compliance monitoring, and multi-tenant support with biometric authentication.

Somesh PathakSomesh Pathak
Other

Intune Change Tracking

An Azure Workbook for analyzing and tracking changes within Microsoft Intune environments. Provides rich audit log analysis with filters, profile type search with value change tracking, device identity and Autopilot hash tracking, and device operations audit logs.

Niklas TinnerNiklas Tinner