{"generated":"2026-10-18T00:33:42.391Z","source":"https://azureblog.co.uk","count":43,"note":"Free browser tools. Nothing pasted into them leaves the browser.","tools":[{"name":"Sign-in Investigator","description":"Replay sign-in logs on a 3D globe and catch password spray, MFA fatigue and impossible travel.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/investigator/"},{"name":"Sign-in log explainer","description":"Paste a sign-in event from Entra and get a plain-English account of what happened and why.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/signin/"},{"name":"SAML decoder","description":"Decode a SAMLRequest or SAMLResponse and spot common SSO problems.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/saml/"},{"name":"JWT decoder","description":"Decode an Entra access or ID token and see what each claim means.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/jwt/"},{"name":"Troubleshooting wizards","description":"Step-by-step paths for sign-in failures, non-compliant devices and SSO errors.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/troubleshoot/"},{"name":"Conditional Access visualiser","description":"Load your policies as JSON, see each in plain English and check them against a baseline.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/ca/"},{"name":"Certificate decoder","description":"Decode a PEM, CER or SAML metadata certificate: expiry, thumbprints, SANs and key usage.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/cert/"},{"name":"Email header analyser","description":"Paste message headers to see the route, SPF, DKIM, DMARC and Microsoft 365's spam verdict.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/headers/"},{"name":"IP range checker","description":"Test IPs against named location ranges, and spot private, overlapping or invalid ranges.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/ip-check/"},{"name":"Intune and Autopilot error codes","description":"0x87D1… and 0x8018… codes from app installs, enrolment and Autopilot, explained with what to check.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/intune-errors/"},{"name":"Event ID lookup","description":"4625, 4771, PRT, hybrid join, LAPS and BitLocker event IDs, explained with what to check.","section":"Decode and diagnose","url":"https://azureblog.co.uk/tools/event-ids/"},{"name":"Tenant ID lookup","description":"Find any domain's Entra tenant ID, cloud and region, and whether sign-in is managed or federated.","section":"Look it up","url":"https://azureblog.co.uk/tools/tenant/"},{"name":"GUID lookup","description":"Identify any Microsoft app, Entra role or Graph permission GUID from a log or token.","section":"Look it up","url":"https://azureblog.co.uk/tools/guid/"},{"name":"AADSTS error lookup","description":"Common sign-in error codes, explained with what to check.","section":"Look it up","url":"https://azureblog.co.uk/tools/aadsts/"},{"name":"Graph permission explainer","description":"What a permission allows, how risky it is, and a least-privilege alternative.","section":"Look it up","url":"https://azureblog.co.uk/tools/permissions/"},{"name":"Which licence do I need?","description":"Find which Entra and Intune licences include a feature.","section":"Look it up","url":"https://azureblog.co.uk/tools/licences/"},{"name":"MSOnline & AzureAD to Graph","description":"Translate retired PowerShell cmdlets to Microsoft Graph PowerShell.","section":"Look it up","url":"https://azureblog.co.uk/tools/graph-powershell/"},{"name":"Timestamp converter","description":"Convert lastLogonTimestamp, pwdLastSet, Unix time and ISO dates, with what each attribute means.","section":"Look it up","url":"https://azureblog.co.uk/tools/timestamps/"},{"name":"Private endpoint DNS zones","description":"The private DNS zone and on-premises forwarder for each Azure private endpoint.","section":"Look it up","url":"https://azureblog.co.uk/tools/private-dns/"},{"name":"Licence SKU lookup","description":"Turn SKU part numbers like SPE_E5 into product names and see every service plan.","section":"Look it up","url":"https://azureblog.co.uk/tools/skus/"},{"name":"VM size decoder","description":"What each part of an Azure VM size name means, from family to feature letters.","section":"Look it up","url":"https://azureblog.co.uk/tools/vm-sizes/"},{"name":"Least-privilege role finder","description":"Tick the permissions someone needs and find the smallest Azure or Entra built-in role that grants them.","section":"Look it up","url":"https://azureblog.co.uk/tools/roles/"},{"name":"Identity converter","description":"Convert between objectGUID, ImmutableId, Entra object ID, SID and LDAP hex.","section":"Look it up","url":"https://azureblog.co.uk/tools/id-convert/"},{"name":"Resource ID parser","description":"Split an Azure resource ID or portal URL into its parts, with CLI, PowerShell and KQL to target it.","section":"Look it up","url":"https://azureblog.co.uk/tools/resource-id/"},{"name":"Tenant health check","description":"Run a read-only script, load the result here and get a scored security report.","section":"Plan and check","url":"https://azureblog.co.uk/tools/health/"},{"name":"Email security checker","description":"Grade a domain's SPF, DKIM, DMARC and MX records and get the records to fix them.","section":"Plan and check","url":"https://azureblog.co.uk/tools/email-security/"},{"name":"App permission risk check","description":"Find the apps in your tenant that can read every mailbox or change admin roles.","section":"Plan and check","url":"https://azureblog.co.uk/tools/app-risk/"},{"name":"Access Map","description":"Who holds which Entra PIM roles and Azure roles at every scope, with groups expanded and risky access flagged.","section":"Plan and check","url":"https://azureblog.co.uk/tools/access-map/"},{"name":"Am I affected?","description":"Answer a few questions and get a dated action plan for upcoming Microsoft changes.","section":"Plan and check","url":"https://azureblog.co.uk/tools/affected/"},{"name":"Deadline calendar","description":"Every Microsoft deadline on the timeline, as a calendar you can subscribe to.","section":"Plan and check","url":"https://azureblog.co.uk/timeline/"},{"name":"Azure subnet planner","description":"Lay out VNet subnets with Azure's reserved addresses and minimum gateway, firewall and Bastion sizes.","section":"Plan and check","url":"https://azureblog.co.uk/tools/subnets/"},{"name":"Azure naming generator","description":"Consistent resource names from Cloud Adoption Framework abbreviations, checked against each type's rules.","section":"Plan and check","url":"https://azureblog.co.uk/tools/naming/"},{"name":"Microsoft 365 DNS checker","description":"Check a domain's MX, Autodiscover, DKIM, Teams and Intune enrolment records against what Microsoft expects.","section":"Plan and check","url":"https://azureblog.co.uk/tools/m365-dns/"},{"name":"Conditional Access policy builder","description":"Build a policy from a template or form and get the JSON and Graph PowerShell to create it.","section":"Save time","url":"https://azureblog.co.uk/tools/ca-builder/"},{"name":"Deadline widget","description":"Show upcoming Microsoft deadlines on your SharePoint intranet or in a Teams tab.","section":"Save time","url":"https://azureblog.co.uk/tools/embed/"},{"name":"User comms templates","description":"Ready-to-send emails for passkeys, MFA changes, compliance and more.","section":"Save time","url":"https://azureblog.co.uk/tools/comms/"},{"name":"Change request generator","description":"Fill in a short form and get a complete change request with risk and rollback.","section":"Save time","url":"https://azureblog.co.uk/tools/change/"},{"name":"Win32 app command builder","description":"Packaging, silent install and uninstall commands, detection rules and return codes for Intune.","section":"Save time","url":"https://azureblog.co.uk/tools/win32/"},{"name":"Sign-in KQL builder","description":"Pick filters and get a ready-to-run KQL query for Entra sign-in logs.","section":"Save time","url":"https://azureblog.co.uk/tools/kql-builder/"},{"name":"Graph query builder","description":"Build $filter and $select queries for users, groups, devices and sign-ins, with Graph PowerShell.","section":"Save time","url":"https://azureblog.co.uk/tools/graph-query/"},{"name":"Script library","description":"Every PowerShell, CLI, Graph and KQL snippet on this site, searchable, with a copy button.","section":"Save time","url":"https://azureblog.co.uk/tools/scripts/"},{"name":"KQL library","description":"Ready-to-use Log Analytics queries from posts on this site.","section":"Save time","url":"https://azureblog.co.uk/tools/kql/"},{"name":"Practice quiz","description":"Test yourself on Entra ID, Intune and Azure, or study with flashcards.","section":"Save time","url":"https://azureblog.co.uk/tools/quiz/"}]}