PowerShell Library

Reusable, sanitized PowerShell for the blue team — access reviews, evidence generation, and directory hardening. Copy, run, answer the prompts.

GUIDED RUNBOOK

Exchange mailbox holds & lifecycle

Step-by-step wizard — triage mailbox state, decode every hold, remove litigation/retention holds safely, clean Recoverable Items, recover inactive mailboxes, permanently delete. Commands fill from the mailbox you enter.

Open runbook → 1 post

Identity & access

Privileged-access reviews, PIM evidence, and directory-role reporting.

Open section → Coming soon

Endpoint & Intune

Device, compliance, and Intune reporting scripts.

Open section → Coming soon

Detection & reporting

Log queries, export helpers, and scheduled reporting.

Open section →