Loading
PS Script
Verified
Updated Aug 2026Windows Media Creation CLI
Windows Media Creation CLI is a PowerShell-based tool that automates building Windows installation media on a USB drive. It supports Windows 11 (22H2-25H2) and Windows 10, with customizable architecture, language, region and edition, enabling fully automated media creation. It also supports OEM driver injection via AUTOUNATTEND or DISM, single or multi-driver packs, and can generate an installwimdrivers.csv catalog to track installed drivers.
Works with
Windows
Screenshots
Security Analysis
6of 6
All Checks Passed
5 files scanned on Sep 20, 2026
No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Malicious Patterns
No Hardcoded Secrets
AI Analysis
The code performs legitimate Intune/Windows Media Creation tasks (downloading OEM driver catalogs, extracting, and injecting drivers into a Windows image). Primary security concerns are remote code execution risk from executing vendor installers, and a potential bug due to an undefined baseDownloadUrl in add-driver.ps1. No credential harvesting or data exfiltration patterns were detected, and there are no hardcoded secrets. Recommendations: fix the undefined variable, add signature/hash verification for downloaded drivers, and consider implementing driver package validation prior to integration into install.wim.
You might also like
PS Script
Nick Benton
IntuneFirewallMigration
IntuneFirewallMigration is a public-preview tool that migrates Group Policy and local firewall rules into Intune as Settings Catalog policies. It supports selecting specific firewall profiles (Domain, Private, Public) and importing only inbound or outbound rules, using Microsoft.Graph.Authentication with Invoke-MgGraphRequest. The script disables telemetry, requires Graph permissions (DeviceManagementConfiguration.ReadWrite.All), and works with PowerShell 5 or 7 to modernize firewall management in Intune.
Nick BentonPS Script
Niklas Rast
PowerShell ADMX wizard
PowerShell ADMX Wizard creates custom ADMX/ADML templates from a CSV of registry keys, enabling Windows policies via Intune. It generates GUID-based templates, adds registry entries (STRING, DWORD, BINARY), and logs progress. After creation, upload the ADM/ADML to Intune as Imported ADMX to apply through a configuration profile.
Niklas RastPS ScriptNiklas Rast
Windows Recovery Partition Editor
Windows Recovery Partition Editor resizes the local Windows Recovery Partition to 984MB and injects CAB files to enable optional features and language support. It deploys via a PowerShell script, placing architecture-specific CABs under tools\amd64 or tools\arm64cpu and matching language packs, with an optional backup of OEM images. Detection uses the registry key HKLM:\SOFTWARE\YourCompanyNameHere\Client-Recovery with value 1.0.0.
Niklas RastPS Script
Michael Niehaus
Autopilot Branding
A PowerShell-based customization tool packaged as an Intune Win32 app for configuring Windows 10/11 devices during Autopilot deployment. Customizes start menu layout, background/theme, time zone, removes built-in apps, installs OneDrive, configures language packs, and manages Windows features.
Michael Niehaus