Read-only investigation Workbench

PowerShell-style investigation without a general-purpose shell.

Try an allowlisted Microsoft 365 query and inspect the readable result. Commands outside the supported catalog are blocked.

investigation.ps1

Shell BLOCKED

Filesystem BLOCKED

Infrastructure BLOCKED

Network GRAPH ONLY

Tenant BOUND

Writes PROTECT

Readable resultDemo-safe output

Run an approved query to see a readable result table.