Microsoft

Look up PowerShell cmdlets, check a Windows security baseline export, review Entra ID Conditional Access policies and Exchange transport rules for common security gaps.

5 tools

Microsoft 365

Exchange transport rule analyzerPaste Exchange transport rules to find auto-forwarding and BCC to external addresses, and unconditional rules.NewAnalyzer

Entra ID

Entra ID Conditional Access analyzerPaste exported Conditional Access policies to check for missing admin MFA, unblocked legacy auth and overly broad scopes.NewAnalyzer

Active Directory

Windows security baseline checkerPaste a secedit export to check password policy, audit settings and registry security values against known baseline recommendations.NewAnalyzer

Windows logs & config

Event IDs and Windows auditing.

Windows Event ID lookupLook up common Windows Event IDs: logon, account changes, services, Kerberos, RDP and PowerShell. Useful for troubleshooting and security audits.Reference

Cheat sheets

Commands and syntax for this area.

PowerShell cheat sheetSearchable list of essential PowerShell cmdlets for files, processes, services, the pipeline and remoting, for PowerShell 7 and 5.1.NewCheat sheet