Forum Discussion

rpadilla-ics's avatar
rpadilla-ics
Copper Contributor
Nov 28, 2022

Outdated PowerShell Script for Security Forensics

Hi All, 

 

Recently, we had a client experience a security incident and had the need to run the PowerShell Script in the below article "Get-AllTenantRulesAndForms.ps1" from GitHub. After running and reviewing the script, it appears to be attempting use basic authentication which has been disabled by Microsoft starting October 2022. We attempted to update the connection to modern authentication which was successful and connected however the subsequent commands that query the mailboxes still returns 401 unauthorized with the correct permissions applied to the administrator account. Does anyone know if this script will be updated to properly use modern authentication?

 

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/detect-and-remediate-outlook-rules-forms-attack?view=o365-worldwide

 

Thanks, 
Robert Padilla

Resources