Testing Security Functions with Pester: A Real-World Example
A real path traversal validator, tested end to end with Pester. The test patterns, the edge cases that actually matter, and coverage that holds up once the function ships.
Posts
Understanding Orphaned SIDs in Active Directory
Deleting an AD account does not remove the security references pointing at it; they sit in ACLs as orphaned SIDs. An over-engineered PowerShell solution to find them at scale, with batching, logging and full test coverage.
Modernizing Your Active Directory: A PowerShell Solution for Kerberos Encryption Migration
Kerberoasting depends on RC4 still being available. How to inventory encryption types across the domain and automate the move to AES without locking anyone out.
Blue/Green Deployment for Patch Management
I went looking for a real use case for PowerShell classes and found one: blue/green patch deployment, with zero downtime and a rollback that takes effect immediately.
Transforming PowerShell Development with GitHub Copilot: Enterprise Standards and Custom Instructions
Copilot writes whatever PowerShell it feels like unless you tell it otherwise. Encoding your team’s standards as custom instructions so generated code matches your style, error handling and testing rules.
PowerShell AST or "How I Stopped Looking for that Curly Brace"
The PowerShell AST lets you analyze a script as a structure instead of reading it line by line: finding unused code, mapping dependencies, and navigating 1500-line scripts without hunting for a missing brace.
Part 3: Deploying CIS Benchmarks at Scale with Systems Manager
Pushing CIS benchmarks to hundreds of Windows servers with Systems Manager and DSC, including CloudWatch dashboards and scheduled maintenance windows.
Part 2: Making Sure Systems Manager Actually Works and Logs Are Sent to CloudWatch
Why your Windows instances never show up in Systems Manager, how to fix the agent and the IAM role, and how to get DSC logs into CloudWatch. The troubleshooting guide the AWS docs skipped.
Part 1: Getting Started with PowerShell DSC and CIS Benchmarks in AWS
Windows security configuration drifts, constantly. This starts a step-by-step series on automating CIS benchmarks with PowerShell DSC and AWS Systems Manager.
What You Should Know About Managing OneDrive in 2025
OneDrive administration notes from the M365 Community Conference: sync controls, retention, storage limits, and the settings most admins never touch.