Export Clean Entra ID & Intune Grids to CSV in One Click—With Built-In Formula-Injection Protection.
Stop fighting broken copy-paste in Microsoft Entra ID, Intune, Defender, and ServiceNow virtualised role="grid" tables. Paste any grid or JSON log below to convert it to a clean, auditor-ready CSV right in your browser—or install our 100% free Chrome extension.
Live ARIA Grid, HTML & JSON Log-to-Safe-CSV Workbench (OWASP CWE-1236 Sanitiser)
Paste raw HTML <table> markup, virtualized [role="grid"] DOM snippets, JSON array logs, or TSV/CSV rows below to strip OWASP CSV Formula Injection payloads (=cmd|...), preserve UK 07... leading zeros, and export a clean UTF-8 BOM CSV:
p=none / report-only) before production rollout. See ICO/GDPR Privacy Notice, Reg. 37 Digital Terms & Liability Cap (£0–£39).1. Why Standard Table Scrapers Fail on Modern Cloud Admin Consoles
Enterprise portals—including Microsoft Entra ID, Intune, Defender, ServiceNow, Jira, and cloud SIEM dashboards—rarely use legacy HTML <table> tags. Instead, they render virtualized ARIA grids using <div role="grid">, <div role="row">, and <div role="gridcell">. Traditional browser table extensions cannot see these grids at all.
FaultyPacket Clean Table & BI CSV Exporter automatically detects both standard HTML tables and virtualized ARIA grids ([role="grid"], [role="table"]), strips hidden SVG/icon badge noise, and exports RFC 4180-compliant CSV or TSV data in one click.
2. Preventing OWASP CSV Formula Injection (CWE-1236) in Log Exports
When exporting audit logs, user directories, or ticketing queues to open in Microsoft Excel or Google Sheets, an attacker who controls a username, display name, or HTTP User-Agent string can inject a payload beginning with =, +, -, or @:
Our 100% Free Forever Community Edition automatically neutralizes dangerous formula prefixes before writing the CSV file, prepends a UTF-8 Byte Order Mark (BOM) so Excel renders international characters cleanly, and preserves leading zeros on employee IDs, asset tags, and UK/international phone numbers.
Frequently Asked Questions
Why does Excel strip leading zeros from phone numbers and asset IDs in CSV files?
By default, Excel parses unquoted numeric strings as numbers and drops leading zeros (turning 07447032678 into 7447032678). FaultyPacket's Pro CSV Exporter formats identifier columns safely and writes a UTF-8 BOM header so Excel opens the file cleanly.
What is OWASP CSV Formula Injection (CWE-1236)?
When untrusted user input starting with =, +, -, or @ is exported into a CSV and opened in Excel or LibreOffice Calc, the spreadsheet interpreter executes it as an active formula or DDE command. Sanitizing those cells during export prevents local code execution and data exfiltration on the analyst's workstation.
Deploy the Automated Fix in Minutes — Or Grab Our 100% Free Chrome Extensions
Need drop-in Nginx/Apache/IIS/Cloudflare configs, offline Python & PowerShell collectors, and board-ready HTML reports? Choose a standalone pack (£12 WP & WooCommerce Shield, £19 NIS2/DORA, £24 DMARC/PHP2Shell, £29 Cyber Essentials v3.3) or get all 4 in the £39 Complete 4-Pack Compliance & Web Shield Bundle (Save £45 / 54%).
Both of our Chrome MV3 extensions are 100% Free Forever (zero paywall, zero telemetry). Download them below or fuel the Lab Fund:
Need Done-For-You Entra ID, Intune & Cyber Essentials v3.3 Evidence Collection in 24 Hours?
Download our 100% Free Chrome MV3 Table & ARIA Grid Exporter (.zip) below, grab the £39 Complete 4-Pack Compliance & Web Shield Bundle, or hire us asynchronously on Fiverr (@faultypacket) to deliver your executive audit:
Instant 0-Second Self-Serve Template ZIP. You immediately download our unencrypted production scripts, MU-plugins, server configs, and templates, and you fill in your own domain name using our 3-minute Quick-Start guide. Lowest flat price because no custom engineer time is required.
Custom “Done-For-You” 24h Engineering. Why Fiverr costs more: our engineers run a deep external server & DNS probe on your live domain(s) and custom-write every record and config file specifically for your domain, IPs, and mail/payment stack—ready to paste with zero editing. Includes a custom 0–100 Executive HTML Scorecard written for your company, multi-domain tiers (1–5 domains or 25–250 suppliers), live post-fix verification, and all 4 Packs (£84 value) free on Premium.
Gig #1 · Domain DMARC, SPF, DKIM & MTA-STS Audit + DNS Fix Pack£24 Self-Serve ZIP · US$25 / US$35 / US$50 Fiverr
Full RFC 7489/7208/8461 external audit (SPF, DMARC, DKIM, MTA-STS, TLS-RPT, CAA) + Cloudflare/BIND/M365 DNS Fix ZIP (incl. Google/Yahoo 550 5.7.26 bulk-sender compliance).
Gig #2 · WP, WooCommerce & PHP2Shell Hardening£12 WP / £24 PHP ZIP · US$15 / US$30 / US$55 Fiverr
Zero-login WordPress/WooCommerce /wp-json/wp/v2/users, xmlrpc.php, PCI-DSS v4.0.1 CSP & wp_mail() 550-5.7.26 rescue + PHP2Shell (CVE-2026-109618) FastCGI/CGI lockdown, MU-plugins & Cloudflare WAF ZIP.
Gig #3 · Cyber Essentials v3.3 (“Danzell”) & Entra ID Pre-Audit£29 Self-Serve ZIP · US$35 / US$55 / US$85 Fiverr
Mandatory April 2026 NCSC/IASME v3.3 gap analysis (cloud MFA anti-spoofing, passwordless readiness, 1-day leaver SLA, Device Code block) + offline Graph PowerShell collector & IASME model answers.
Gig #4 · NIS2 Art. 21 & DORA 25–250 Supplier Bulk Security Audit£19 Self-Serve CLI · US$50 / US$95 / US$175 Fiverr
Automated non-intrusive posture audit of up to 25, 100, or 250 vendor domains + board-ready HTML Executive Dossier, risk-scored CSV register, 30-day vendor remediation notices & Python CLI scanner.
Recommended Infrastructure & Vetted Security Stack (When Fixing Your DNS, Identity & Endpoints)
When remediating RFC 7208 SPF 10-lookup limits, hosting MTA-STS TLS policies, containing PHP2Shell at the edge, or enforcing UK Cyber Essentials v3.3 ("Danzell") and EU NIS2 Art. 21 controls, these are the four practitioner-vetted platforms we recommend:
1. Cloudflare DNS, WAF & RegistrarDNS / MTA-STS / WAF
Free anycast DNS with instant TXT/SPF propagation, free Universal SSL for mta-sts.<domain> static Pages hosting, and managed WAF rulesets for PHP2Shell edge containment.
2. 1Password BusinessCE v3.3 Passkeys & Secrets
Enforces UK Cyber Essentials v3.3 ("Danzell") passwordless / passkey & secrets management controls across hybrid Windows and iOS estates.
3. Proton Pass / Proton Mail BusinessGDPR & NIS2 Art. 21(2)(j)
Swiss/EU GDPR & NIS2 Art. 21(2)(j) end-to-end encrypted mail and credential vault for high-assurance executive communications.
4. Resend Transactional SMTP / APISubdomain DKIM Isolation
Developer-grade transactional SMTP/API with isolated subdomain DKIM (send.<domain>) so marketing/app mail never pollutes your root SPF 10-lookup budget.
Saved you an afternoon of headaches? Buy me a coffee. ☕
I built these scanners and Chrome extensions so you can get instant answers without booking a sales call or handing over your email—if they just saved your day, a coffee keeps the late-night builds going.