March 2026 Summaries

Prowler aimed to enhance Microsoft 365 security coverage by integrating PowerShell from Python, overcoming the limitations of the Microsoft Graph API, which only addressed 10% of the CIS benchmark requirements. Initially hesitant due to potential complexities, the team pursued this unconventional integration to achieve comprehensive security visibility. They developed a session-based model to manage PowerShell processes efficiently, addressing challenges like memory management and command injection risks. This hybrid approach, combining Microsoft Graph and PowerShell, enabled Prowler to significantly improve CIS benchmark coverage and actionable security findings in Microsoft 365 environments. The solution's success led to the creation of py-pwsh-session, an open-source project facilitating secure PowerShell execution from Python, thus offering a valuable tool for the broader community.