Security Assessment
Threat detection, persistence-mechanism analysis, M365 security auditing and incident-response tooling for enterprise environments.
Production-grade PowerShell tools and free web utilities for MSPs and in-house IT. Built from real-world MSP engagements and open source under the MIT license.
Threat detection, persistence-mechanism analysis, M365 security auditing and incident-response tooling for enterprise environments.
AD health monitoring, security auditing, hybrid identity management and DFSR recovery. From password health to privileged-group analysis.
IP-conflict detection, VLAN identification, SMTP validation and network topology discovery built for MSP environments.
Server baseline deployment, RMM agent bootstrapping, file management, SharePoint migration readiness and M365 archive auditing.
System health reports, disk-space and service monitors with auto-restart, and availability checks with Microsoft Graph email alerts.
Microsoft 365 Copilot readiness, SharePoint security, Power Automate inventory, certificate discovery and modern-authentication workflows.
A click-through phone replica that lets a technician talk a user through email, MFA, VPN and enrollment on iPhone, Android, Samsung and Motorola — plus a configuration-profile builder.
Talking a user through a phone you do not use every day? Phone Guide is a click-through replica of iPhone, iPad, Android, Motorola and Samsung menus. Pick a walkthrough and the pink marker shows the next tap, with the sentence to read to the user.
250+ walkthroughs written for the technician, not the user: what to tap, what to say, and what to watch out for.
Independent training aid — not affiliated with Apple, Google, Samsung, Motorola, Microsoft, WatchGuard or ConnectWise. Screens are original illustrations, not screenshots.
Build an iPhone / iPad configuration profile (.mobileconfig) in the browser — only settings that work on a normal, unsupervised phone.
Profiles are generated unsigned; test on a spare device before deploying.
All tools are free to use, modify and distribute under the MIT License. Built from real MSP engagements and hardened in production environments. Commercial support available.
*Most scripts. Some cloud tools require Microsoft Graph or Exchange modules.
# Comprehensive persistence scanner # Checks 22 categories with threat scoring param( [string[]]$ComputerName = $env:COMPUTERNAME, [int]$ThreatThreshold = 0, [switch]$ExportHTML, [switch]$BaselineMode, [string]$CompareBaseline ) # Scan WMI event subscriptions (often missed) $wmiSubs = Get-WMIObject -Namespace "root\subscription" ` -Class __EventFilter # Decode obfuscated PowerShell commands if ($entry.Value -match "[A-Za-z0-9+/]{40,}={0,2}") { $decoded = [Text.Encoding]::Unicode.GetString( [Convert]::FromBase64String($match) ) $score += 35 # Encoded command penalty }
These tools are built and maintained in spare time and freely available to the whole IT community. If they have saved you hours of work, consider supporting continued development.
♥ Donate via PayPal (opens in a new tab)Every contribution directly funds new tool development and maintenance.
Commercial support available for enterprise deployments,
custom tooling and on-site engagements.