Updating the Entra ID Password Protection Policy, October PowerShell Community Call
+ Identify Device state in EntraID/Defender with PowerShell
Hey everyone! Here’s to another great week of PowerShell content! Two days ago I presented at the Michigan Association of School Boards on Public School AI policy. It was a really fantastic, well received presentation and I’m happy to be able to support our schools here. I have another presentation this week at the Michigan Association of Educational Data Systems on Guerilla Zero Trust Security, which I will be presenting v3 of my Ghost module and v2 of my Ambush module.
PowerShell Videos
PowerShell Security: A Journey Through Time - Miriam Wiesner & Anam Navied
Miriam Wiesner and Anam Navied (posted by PSConfEU) have an interesting video on the evolution of PowerShell security, detailing how security features have advanced through various PowerShell versions and emphasizing the importance of safeguarding scripts and automation.
Unleash the Power of PowerShell Pipelines for Beginners!
Travis Roberts has a great video about PowerShell pipelines for beginners, breaking down what they are and why they matter to transform your automation and scripting workflow. This tutorial covers practical examples from filtering processes to managing Azure VMs to help you create powerful, time-saving one-liners.
PowerShell Community Call - October 16th, 2025
PowerShell and DSC Team Channel has an interesting video detailing the latest PowerShell ecosystem updates, including the release of 7.6 Preview 5 with fixes for Out-Gridview and the ability to update the Path environment variable in-session after using package managers like winget. The call also covered the release of DSC v3.2 Preview 6, a new PowerShell profile DSC resource demo, and a projected delay for the 7.6 RC/GA schedule.
Learning, Leading, and Logging with Constantin Hager. The PowerShell Podcast E197
Andrew Pla has Constantin Hager on the PowerShell Podcast to talk about his journey in the PowerShell community, discussing his favorite tools and path from discovering PowerShell to speaking at major conferences. He also dives into his involvement with open-source projects like PSFramework and AutomatedLab, highlighting how community and mentorship shaped his career and his work on a portable VS Code setup.
Have you been hacked? Building cases with Indicators of Compromise | Learn with HTB
Hack The Box has an interesting video about how to detect and investigate Indicators of Compromise (IoCs), which are the breadcrumbs attackers leave behind, using tools and logs like Windows Event Logs and Sysmon to reconstruct a security incident. The tutorial walks through specific log IDs for process creation, network connections, and registry changes, and shows how to create YARA rules to scan for file-based IoCs, ultimately teaching you how to build a complete forensic narrative.
PowerShell Community News
Automating Web Application Creation in Global Secure Access Using PowerShell
Christian Frohn has a great post about automating the creation of Enterprise Applications for Private Access in Microsoft Global Secure Access (GSA). The process uses a PowerShell script and a CSV file to automatically create the web apps, add the necessary URLs/ports, create a segmented security group, and assign that group to the application, saving time and reducing manual errors for bulk creation tasks.
https://www.christianfrohn.dk/2025/10/21/automating-web-application-creation-in-global-secure-access-using-powershell/
How to Install Microsoft Graph PowerShell module
Prajwal Desai has published a great post on how to install the Microsoft Graph PowerShell module. Look, this module is essential for managing and automating tasks across the Microsoft 365 services, connecting to the Microsoft Graph API for things like user and group management. It walks you through setting the execution policy, installing the PowerShellGet module, running the Install-Module Microsoft.Graph cmdlet, and then connecting with Connect-MgGraph.
https://www.prajwaldesai.com/install-microsoft-graph-powershell-module/
Updating the Entra ID Password Protection Policy with the Microsoft Graph PowerShell SDK
Tony Redmond has a great article on how to use the Microsoft Graph PowerShell SDK to create or update the Entra ID Password Protection Policy settings, which is a flexible method for managing settings like lockout duration, especially for organizations that need to ensure configuration consistency across multiple tenants using Azure Automation. The article details the PowerShell steps, including checking for an existing directory setting object and using New-MgBetaDirectorySetting or Update-MgBetaDirectorySetting cmdlets.
https://office365itpros.com/2025/10/23/password-protection-policy-ps/
Identify Device state in EntraID/Defender with PowerShell
edgarus71 has published a great post about how to create an integrated PowerShell script that leverages an Entra ID app registration, MS Graph API, and Windows Defender ATP API to accurately cross-reference and report on a device’s Enabled or Disabled state between Entra ID and Defender for Endpoint.
PowerShell Conference Europe 2026: Call for Speakers
PowerShell Conference Europe 2026 has an interesting post about the Call for Speakers for their event in Wiesbaden, Germany, from June 1-4, 2026. Submissions for sessions are open until December 14, 2025, and they are looking for unique content ranging from Real-Life PowerShell and DevOps to soft skills, with options for 45-minute standard sessions or 90-minute follow-along/deep dive sessions.