Scripts
Every script has built-in help (Get-Help .\Script.ps1 -Full). Reports are read-only; scripts that make changes support -WhatIf.
Inventory and clean-up
Know what you have, and find what you're paying for but not using.
- Find-AzOrphanedResources
Finds orphaned Azure resources that cost money or clutter: unattached disks, unused public IPs and more.
- Get-AzVMInventory
Lists every Azure VM in every subscription you can see, with size, power state, disks, IPs and tags.
Governance
Tagging and access reviews across every subscription.
- Get-AzRoleAssignmentReport
Reports Azure RBAC role assignments in every subscription and flags the risky ones.
- Get-AzUntaggedResources
Lists Azure resources (and optionally resource groups) that are missing required tags.
Network security
Open ports, missing NSGs and unused application security groups.
- Get-AzNsgCoverage
Finds gaps in network security group coverage: subnets and network interfaces with no NSG, and unused application security groups.
- Get-AzNsgRuleReport
Reports network security group rules in every subscription and flags the risky ones, such as RDP or SSH open to the internet.
Operations
Backup coverage and scheduled start/stop.
- Get-AzBackupCoverage
Shows which Azure VMs are protected by Azure Backup, and which aren't.
- Invoke-AzVMPowerSchedule
Starts or stops (deallocates) Azure VMs that carry a schedule tag. Designed for Azure Automation.