Changelog
What's new across the catalog, tools and guides.
2026-07-07
- New: AADSTS error code decoder: 44 Entra ID sign-in error codes with causes, next steps and the sign-in log command for each.
- New: Conditional Access policy explainer: paste a policy's JSON, get a plain-English readout with misconfigurations flagged.
- New guide: "A user can't sign in" triage: a decision tree branching on the AADSTS code family.
- New guide: "Access denied" in SharePoint and OneDrive: permissions, broken inheritance, sharing links and external access, layer by layer.
- New reference: Microsoft Graph scopes: which permission scope for which admin task, filterable.
- New reference: GDAP roles: the minimum delegated role for common MSP tasks, filterable.
- Incident response builder gained three scenarios: leaver/offboarding (with delegate handover), phishing campaign cleanup, and admin account compromise with persistence hunting.
- Homepage reorganised into Catalogs, Tools, Guides and References.
2026-07-04
- Offline support: previously visited pages and tools now work without a connection.
- Incident response builder: risky sign-in runbook now resolves the user object ID correctly; date ranges default to the last 7 days.
- Header analyser: IPv6 addresses in compressed form are now parsed in the hop timeline.
- Email auth analyser: SPF
redirect= counts toward the 10-lookup limit, and weak DKIM SHA-1 settings are flagged.
- NDR decoder: added codes 4.3.2, 5.2.121, 5.2.122, 5.4.300 and 5.7.708.
- Console validator: pasting a cmdlet from another module now points you to the right builder page.
- High contrast setting now persists across pages and visits.
- Social sharing previews and structured data added across the site.
2026-06-24
- New: Incident Response Command Builder with runbooks for account compromise, BEC, OAuth consent abuse and risky sign-in triage.
- Exchange builder: added Contacts commands.
2026-06-18
- All builders: risk labels on every command, dropdown parameters, pipeline modifier support.
- Homepage: added guide cards for the five newest guides.
2026-06-17
- Launch: seven command builders (Exchange, Entra ID, Intune, Teams, SharePoint, Security, Purview), three analysers (headers, email auth, NDR), seven guides, two references and the offline catalog.