Microsoft 365 · Security · Automation

Microsoft 365 security,
no fluff.

Audits, automation and cleanup in your tenant — done hands-on, not in a slide deck. I write about the real holes I find in M365 environments, and how I patch them with PowerShell before someone else finds them.

tenant-audit.ps1

            PS> Connect-MgGraph -Scopes 'Directory.Read.All'

          
            PS> Get-MgUser -All |

                Where-Object { -not $_.AccountEnabled -and $_.AssignedLicenses }

# disabled accounts still burning licences
# the kind of thing Secure Score won't show you

What I do

M365 security

I find what Secure Score doesn't show: dead guest accounts, "anyone" links, permissions from three admins ago. And I clean them up.

Automation

If you're doing something in the tenant by hand for the third time, a script should be doing it. PowerShell, Graph API, Azure Automation, n8n.

Business apps

Small tools that replace the spreadsheet sent around by email: React + Docker — simple, fast, maintainable.