Browser extension policy in Intune is spread across blocklists, allowlists and forced installs, and nothing shows you the combined result. So I wrote an analyzer that does.

My Synology’s RAID controller died, so I replaced it with a 24-bay NetApp DS4246 JBOD running under Proxmox 9. HBA choice, cabling, ZFS pool layout, noise, and what I would do differently.

One PowerShell module that talks to SecretStore, Azure Key Vault, AWS Secrets Manager, Bitwarden and CredMan through the same commands, so hybrid environments stop needing five different scripts.

My AD test environment module still had service account passwords sitting in plain text. This adds PowerShell SecretStore for setup, storage and retrieval, without making the lab harder to spin up.

A PowerShell module that fills a lab domain with a thousand-plus realistic users, groups and OUs in about a minute, and tears them back down cleanly when you are done.

A real path traversal validator, tested end to end with Pester. The test patterns, the edge cases that actually matter, and coverage that holds up once the function ships.

Deleting an AD account does not remove the security references pointing at it; they sit in ACLs as orphaned SIDs. An over-engineered PowerShell solution to find them at scale, with batching, logging and full test coverage.

Kerberoasting depends on RC4 still being available. How to inventory encryption types across the domain and automate the move to AES without locking anyone out.

I went looking for a real use case for PowerShell classes and found one: blue/green patch deployment, with zero downtime and a rollback that takes effect immediately.

Copilot writes whatever PowerShell it feels like unless you tell it otherwise. Encoding your team’s standards as custom instructions so generated code matches your style, error handling and testing rules.