Securing App Secret

Iron Contributor

@Raviv Tamir 

 

In the blog post https://techcommunity.microsoft.com/t5/Microsoft-Defender-ATP/WDATP-API-Hello-World-or-using-a-simpl... the API call to create a token to configure a connection to ATP.

 

Get-Token.ps1.png

 

The issue at hand is that the line $appSecret = '' ### Paste your own app keys here is all in clear text. We have issues with that in a script. Is there a way to secure that information so when someone looks at that script, they will not be able to attain all of the information needed to create that access token?

 
 
0 Replies