IntuneDebug
A PowerShell module for Intune MDM policy reporting and debugging, similar to GPResult. Generates HTML reports showing device information, Intune sync status, applied settings by policy scope, Win32 app assignments, script policies, remediation status, LAPS settings, and certificate assignments.
Security Analysis
38 files scanned on Jun 11, 2026
Two notable risks detected: (1) dynamic dot-sourcing of private/public scripts during module import, which can be a supply-chain integrity risk if the package is tampered; (2) potential HTML injection (XSS) in HTML reports due to unsanitized output. No evidence of remote script downloads, credential harvesting, data exfiltration, reverse shells, or hardcoded secrets in the provided code paths. Overall, IntuneDebug appears to be a debugging/reporting tool; mitigate by tightening module import discipline and ensuring output escaping.
You might also like
Get-IntuneManagementExtensionDiagnostics
A PowerShell script for analyzing Intune Management Extension logs and creating timeline reports. Tracks Win32App deployments, WinGetApp packages, PowerShell scripts, Proactive Remediations, Custom Compliance, and Autopilot ESP phases with HTML reports and integrated LogViewerUI.
Intune Debug Toolkit
A comprehensive Windows-based toolbox for troubleshooting Intune-managed devices. Features registry debugging, Autopilot validation, live MDM event monitoring, SyncML visualization, Win32 app redeployment, IME log analysis, and includes IntuneDeviceDetailsGUI, SyncMLViewer, and CMTrace.
Intune Device Details GUI
A PowerShell-based GUI tool for visualizing comprehensive Intune device information. Shows Azure AD group memberships, Intune filter assignments, application and configuration targeting, BitLocker recovery keys, LAPS passwords, Autopilot profiles, and remediation script status with color-coded assignment states.
Endpoint Analytics Remediation Scripts
A community-driven repository of 86+ PowerShell detection and remediation scripts for Microsoft Intune Endpoint Analytics. Includes scripts for system health, security hardening, device management, application management, optimization, and diagnostics.