Blogs, Articles, and Posts

  • How to Report Entra ID Group Insights
    Entra ID Group Insights are a new preview feature in the Entra admin center. The lack of documentation is challenging, but it’s easy to understand what kind of insights Microsoft wants to deliver. Looking behind the scenes, we find the Graph endpoint for Group insights and can extract the data. That allows us to combine insights with other information to make them more interesting. All done with PowerShell.
  • PowerShell 7.6 release postmortem and investments
    This post shares context on the delayed timing of the PowerShell 7.6 release, our learnings, and the changes the team has already begun making to improve release predictability and transparency.
  • New ClickFix Variant Uses Rundll32 and WebDAV to Evade PowerShell Detection
    A new and more dangerous version of the ClickFix attack technique has been found actively targeting Windows users. Unlike older versions that used PowerShell or mshta to run malicious commands, this new variant takes a different path.

Projects, Scripts, and Modules

Books, Media, and Learning Resources

Community

  • Poking Around Until Something Breaks (And Then Reporting It to Microsoft) with Morten Mynster
    Andrew welcomes back Morten Mynster for a follow-up conversation that’s essentially a highlight reel of one Morten’s public journey over the past year. Morten shares updates on three PowerShell modules he’s released, including his standout LeastPrivilegedMSGraph module, and walks through a security issue he discovered and responsibly reported to Microsoft. Along the way, Andrew and Morten reflect on how putting your work out publicly can lead to unexpected career wins, how AI is reshaping the way people learn and write code, and why getting hands-on is still the best way to actually understand anything. Morten is also two weeks into a new job as a cybersecurity consultant, which came directly from his open-source work.

Fun

Events

Check out psweekly.dowst.dev for all past editions as well as a searchable archive.