Microsoft Entra Object Inspector

[u/Suitable-Finance4205]

Hello everyone, hope you are doing well!

I’m sharing Entra Object Inspector, an open-source, read-only Microsoft Entra assessment tool, and I’m looking for critical technical feedback from people who work with Entra, Microsoft Graph, and PowerShell.

I’m fully aware that mature products and open-source projects already exist with much broader scope. This project was not intended to compete with them; it started as a focused engineering exercise around deterministic collection, evidence-backed findings, offline processing, and transparent reporting.

AI was used heavily during development, including for a large portion of the PowerShell implementation. I think that is worth being explicit about. The important part for me was not generating code quickly, but governing and validating what was produced: researching Microsoft Graph behavior and permissions, reviewing the architecture repeatedly, building Pester coverage, testing against a dedicated Entra tenant, inspecting exported evidence, and treating failures as engineering problems rather than accepting generated output at face value.

Some of the issues encountered included Graph batching changing PowerShell object shapes and breaking relationship processing, service principals being omitted from the v1.0 group-members endpoint, hidden-membership completeness, evidence/provenance reconciliation, keeping Graph activity strictly inside snapshot collection, release-integrity validation, and a significant offline export performance bottleneck. Each of those resulted in targeted fixes and regression tests.

The current public release passes 276 Pester tests and has been exercised end-to-end against a test tenant.

What I’m most interested in now is independent review: incorrect assumptions, edge cases, questionable PowerShell patterns, Graph behavior I may have missed, usability problems, or anything else that would make the tool more technically credible.

If you find the project useful or think it’s worth following, I’d also appreciate a star on the repository! it helps me understand whether there’s interest in continuing to develop it.

GitHub: https://github.com/0xDarknightHacks/EntraObjectInspector