PowerShell Weekly for August 28, 2026

## Blogs, Articles, and Posts - NDES Security Hardening: Protecting and Monitoring the SCEP Registry Configuration [https://directaccess.richardhicks.com/2026/08/24/ndes-security-hardening-protecting-and-monitoring-the-scep-registry-configuration/] This article focuses on securing and monitoring Network Device Enrollment Service (NDES) configuration, specifically the SCEP registry settings, to prevent attacks. - Automate AVD Hybrid part 2 [https://www.nielskok.tech/azure-virtual-desktop/automate-avd-hybrid-part-2/] This blog post demonstrates how to automate the deployment of an Azure Virtual Desktop (AVD) hybrid machine using Terraform and PowerShell. The author provides a step-by-step guide on how to create a VM, install Windows 11, and deploy the AVD agents, resulting in a fully functional AVD hybrid machine. - How to Build Useful Reports from PowerShell — CSV, HTML and Email [https://techygeekshome.info/powershell-reports-csv-html-email/] Learn how to create useful reports from PowerShell output, including choosing the right format (CSV, HTML, or JSON) and scheduling and emailing them properly. - Powershell for Hackers, Part 9: Hacking with PsMapExec [https://hackers-arise.com/powershell-for-hackers-part-9-hacking-with-psmapexec/] PsMapExec is a PowerShell script that allows hackers to dump hashes, execute remote commands, and extract Kerberos ticket keys. It can be used for various attacks such as Kerberoasting, timeroasting, and NTDS dumping. - New Graph Permissions Pose Questions for Microsoft 365 Tenants [https://office365itpros.com/2026/08/26/granular-graph-permissions-question/] Microsoft has introduced three new granular Graph permissions, allowing apps to create and modify user accounts without needing higher-level permissions. To stay up-to-date with new permissions, developers and administrators can use tools like the Permission Explorer and service principal permissions report script. - Microsoft To Enforce WAM for Delegated Interactive Graph Sessions [https://office365itpros.com/2026/08/28/interactive-graph-sessions-wam/] Microsoft is enforcing the use of Web Account Manager (WAM) for delegated interactive Graph sessions, starting from a future date. This change will make older SDK versions incompatible with browser-based authentication and may require administrators to re-evaluate their workflows. ## Projects, Scripts, and Modules - Windows Neofetch Alternatives [https://www.edtittel.com/blog/windows-neofetch-alternatives.html] Ed Tittel explores alternatives to Neofetch for displaying system information on Windows, including the use of Windows Console and custom scripting. ## Books, Media, and Learning Resources - Microsoft Graph Authentication Made Simple — Part 1: Delegated Access [https://youtu.be/OtWMrmlCvwQ] Authentication doesn’t have to be hard. In Part 1 of Microsoft Graph Authentication Made Simple, Andrew Pla and Morten Mynster focus on delegated authentication. ## Community - Unit Testing Your Cloud with Mike Soule [https://powershellpodcast.podbean.com/e/unit-testing-your-cloud-with-mike-soule/] Mike Soule discusses Maester, an open-source PowerShell-based test automation framework that applies unit testing concepts to Microsoft 365 security configuration. - Security Features of PowerShell 7 with Mike O’Neill [https://runasradio.com/Shows/Show/1051] PowerShell 7.3+ introduces security features such as session configuration files and clean blocks to secure scripts, making it harder for attackers to exploit. ## Fun - XKCD v 1.5.3 [https://www.powershellgallery.com/Packages/XKCD/1.5.3] Commands related to the webcomic XKCD ## Events - PowerShell MythBusters w/ Matthew Dowst [https://psoh.io/events/2026-09-powershell-mythbusters-w-matthew-dowst/] Join me and the PowerShell Ohio community for a fun evening of Mythbusting Check out psweekly.dowst.dev [https://psweekly.dowst.dev/] for all past editions as well as a searchable archive.