About
I work in IT operations and cloud security. I have about 20 years in IT. I was an MSP operations manager.
I focus on Microsoft 365, Entra ID, Intune, Defender XDR, Sentinel, and Purview. I automate the work with PowerShell.
Projects
Public PowerShell toolkits. Each one has a guide and scripts.
citrix-powershell-toolkit
Guide and PowerShell scripts for managing Citrix Virtual Apps and Desktops / DaaS with the Citrix PowerShell SDK: reporting, health checks, maintenance and session management.
configmgr-powershell-toolkit
Guide and PowerShell scripts for Microsoft Configuration Manager (SCCM/MECM): client actions, device polling, health checks, and application/package deployment.
defender-xdr-powershell-toolkit
Portfolio toolkit and step-by-step guide for Microsoft Defender XDR with PowerShell 7 and the Graph security API: incidents, alerts, advanced hunting KQL runner, device risk, Secure Score and MDE onboarding.
entra-id-powershell-toolkit
Portfolio toolkit and step-by-step guide for Microsoft Entra ID with PowerShell 7 and Microsoft Graph SDK v2: user lifecycle, groups, app secret expiry, sign-in logs, licensing and PIM.
exchange-online-powershell-toolkit
Portfolio toolkit and step-by-step guide for Exchange Online administration with PowerShell 7 and ExchangeOnlineManagement v3: mailbox inventory, permission and forwarding audits, message trace, cleanup and calendars.
graph-powershell7-admin-toolkit
Portfolio toolkit and step-by-step guide for Microsoft Graph PowerShell 7 (SDK v2), Exchange Online, Purview, and Entra ID security reporting, using certificate or managed identity auth.
intune-powershell-toolkit
Portfolio toolkit and step-by-step guide for Microsoft Intune with PowerShell 7 and Microsoft Graph: device inventory, compliance, stale device cleanup, app status, profile export and Autopilot import.
m365-powershell-toolkit
Read-only PowerShell scripts for Microsoft 365 administration: license reporting, stale Entra ID accounts, and external mail-forwarding audits.
onedrive-powershell-toolkit
Portfolio toolkit and step-by-step guide for OneDrive for Business with PowerShell 7 (SPO module and Microsoft Graph): inventory, storage, sharing audit, pre-provisioning, departed-user access and KFM.
purview-compliance-toolkit
Portfolio toolkit and step-by-step guide for Microsoft Purview compliance with PowerShell 7 (Connect-IPPSSession): label policies, DLP monitoring, retention labels, eDiscovery, audit search and insider risk.
sentinel-kql-toolkit
Portfolio toolkit and step-by-step guide for Microsoft Sentinel with PowerShell 7, Az.SecurityInsights and KQL: analytics rule export/import, sample detections, incident report and data connector health.
sharepoint-online-powershell-toolkit
Portfolio toolkit and step-by-step guide for SharePoint Online administration with PowerShell 7 (PnP.PowerShell and SPO module): site inventory, sharing audit, permissions, storage and lifecycle.
teams-powershell-toolkit
Portfolio toolkit and step-by-step guide for Microsoft Teams administration with PowerShell 7 and the MicrosoftTeams module: inventory, owner and guest audits, orphaned teams, policies, voice and channels.
Certifications
- SC-900 Microsoft Security, Compliance, and Identity Fundamentals
- MS-900 Microsoft 365 Fundamentals
Both are Microsoft certifications.
Articles
Articles are coming soon. They will be on DEV.