Blog & Guides
Practical cybersecurity articles, step-by-step guides, and quick-reference cheat sheets — from Active Directory hardening to Microsoft 365 and zero trust. Written by someone who's done the work. No hype, no fluff.
2 results for “PowerShell” · Clear
PowerShell for Microsoft 365 Administration: Why the GUI Isn't Enough in 2026
The Microsoft 365 admin center is fine for one user, one mailbox, one policy. It falls apart at fifty — and it cannot do half of what the platform actually supports. PowerShell is where bulk operations, security auditing, incident response and automation live, and after the 2025 retirement of the MSOnline and AzureAD modules, the tooling map has been redrawn. Here is why PowerShell administration still matters for the Microsoft 365 and security suites, which modules to use now, what the portals cannot do, and how to automate without leaving credentials lying around.
Building a Microsoft 365 Incident Response Console in PowerShell
Why Microsoft 365 incident response is spread across three PowerShell surfaces and several portals, and how a single-file WPF console consolidates the first-hour actions — email purge via Purview, account containment via Graph/Entra, and BEC investigation — into one window. Includes the platform changes that broke a lot of scripts in 2025 and the open-source tool on GitHub.