PowerShell

Find device code sign-ins and test a Conditional Access block before enforcing it.

Prefer NRPT for DNS namespace blocks to avoid shared-IP fallout from broad Firewall FQDN rules.

Use reviewed Graph PowerShell samples to report application credential expiry.

Process independent work in parallel with PowerShell 7 and a sensible throttle.

Filter the Graph authentication registration report instead of querying every user's methods.

Retrieve Azure service tag address ranges with PowerShell for outbound filtering.

Use managed service accounts for Windows services, IIS, and scheduled tasks, and pay attention to who can retrieve their passwords.