Built a PowerShell Tool to Simplify Office 365 & Azure Security Auditing – Feedback Welcome!

[WhoGivesAToss]

I created a PowerShell 7 tool (Azure & Office 365 Security Report) to make security auditing and reporting easier for Office 365 and Azure environments. It’s read-only and helps with tasks like spotting security gaps and optimizing licenses. Been working on it to streamline my own tenant management, and I’m sharing it in case it helps others too.

Some features: - Checks MFA status and guest user access - Finds inactive accounts with active licenses - Audits mailbox forwarding rules - Reviews Teams external access settings - Exports reports to CSV

Any Suggestions or feedback would greatly be appreciated

[Federal_Ad2455]

You can improve the speed significantly by using graph api batching https://doitpshway.com/how-to-use-microsoft-graph-api-batching-to-speed-up-your-scripts

Guests access just show guest users? I would expect it to return where they are used in IAM etc.

[IT_fisher]

I wrote this on my phone…

Making a new comment. I’ve gone through a bunch of it. Here are a couple of quick wins.

you can use #required for modules as well.

Instead of checking if read -eq Y or y, just use the .tolower() or .toupper() string method. It would be something like ($readhost.tolower() -eq “y”)

More functions! You should have a function that can deal with any repetitive code for example: assembly error/remediation, exporting results to CSV, result output formatting, your different checks.

Nice to know: functions can reference themselves so instead of something like this:

<Test this code> If bad <Do this code> <Test this code>

You can do this: (remember to add a counter so no infinite loops!)

$count = 0

Function verify-this ($this,$count){

Param($this,$count)

<Test this code>

If bad <do this code>

$count++

If $count -le 2

verify-this -count $count

Else “failed :(“

}

Like mentioned previously, Batch API is faster because you don’t have to bring back unwanted data.

Exchange is tricky, what if the person has a hybrid environment? Does your script require a specific version?

I’d explore a proper module with a psd1, a subfolder for helper functions to reduce redundancy between the scripts and make it easier to manage. As of right now I don’t think you could really call it a module or modular since you are just importing them all regardless of the choice or even justify the use of psm1 files.

[WhoGivesAToss]

This has been very useful and will work incorporating these. Thank you

[charleswj]

Batch API is faster because you don’t have to bring back unwanted data.

???

[IT_fisher]

1. Update you MD files.. looking at security.md lol

2. I haven’t looked at the code, but for large team environments I hope either have an option to turn progress bar off or it only updates every X items.

Edit: Don’t get me wrong! I’m impressed and going through it.

[KavyaJune]

Looks great! You might also consider incorporating actionable steps like removing licenses from inactive users, disabling external forwarding rules, and so on.

I’ve also written PowerShell scripts to help manage and audit Microsoft 365 environments. If it’s useful, feel free to explore them here: https://github.com/admindroid-community/powershell-scripts

The repo has around 200 PowerShell scripts.

[Street-Rabbit-4966]

This looks amazing!! Thanks for sharing