Skip to content

Commit

Permalink
fix typos stardate -> startdate
Browse files Browse the repository at this point in the history
  • Loading branch information
EmilienCourt authored and EmilienCourt committed Oct 10, 2023
1 parent 5ee6e13 commit 55e26d1
Show file tree
Hide file tree
Showing 9 changed files with 15 additions and 15 deletions.
2 changes: 1 addition & 1 deletion DFIR-O365RC/Get-AADApps.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
PS C:\>$enddate = get-date
PS C:\>$startdate = $enddate.adddays(-30)
PS C:\>Get-AADApps -stardate $startdate -enddate $enddate
PS C:\>Get-AADApps -startdate $startdate -enddate $enddate
Dump all Azure AD applications and Service Principals related events.
Expand Down
2 changes: 1 addition & 1 deletion DFIR-O365RC/Get-AADDevices.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
PS C:\>$enddate = get-date
PS C:\>$startdate = $enddate.adddays(-30)
PS C:\>Get-AADDevices -stardate $startdate -enddate $enddate
PS C:\>Get-AADDevices -startdate $startdate -enddate $enddate
Dump all Azure AD devices related events.
Expand Down
2 changes: 1 addition & 1 deletion DFIR-O365RC/Get-AADLogs.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ Function Get-AADLogs {
PS C:\>$enddate = get-date
PS C:\>$startdate = $enddate.adddays(-30)
PS C:\>Get-AADLogs -stardate $startdate -enddate $enddate
PS C:\>Get-AADLogs -startdate $startdate -enddate $enddate
Dump all Azure AD logs available
#>
Expand Down
4 changes: 2 additions & 2 deletions DFIR-O365RC/Get-AzDevOpsActivityLogs.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -10,12 +10,12 @@ Function Get-AzDevOpsActivityLogs {
PS C:\>$enddate = get-date
PS C:\>$startdate = $enddate.adddays(-30)
PS C:\>Get-AzDevOpsActivityLogs -stardate $startdate -enddate $enddate
PS C:\>Get-AzDevOpsActivityLogs -startdate $startdate -enddate $enddate
Dump all Azure DevOps activity logs available the user has access to
.EXAMPLE
Get-AzDevOpsActivityLogs -stardate $startdate -enddate $enddate -SelectOrg:$true
Get-AzDevOpsActivityLogs -startdate $startdate -enddate $enddate -SelectOrg:$true
Dump Azure DevOps activity logs for a given organization
#>

Expand Down
4 changes: 2 additions & 2 deletions DFIR-O365RC/Get-AzRMActivityLogs.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -10,12 +10,12 @@ Function Get-AzRMActivityLogs {
PS C:\>$enddate = get-date
PS C:\>$startdate = $enddate.adddays(-30)
PS C:\>Get-AzRMActivityLogs -stardate $startdate -enddate $enddate
PS C:\>Get-AzRMActivityLogs -startdate $startdate -enddate $enddate
Dump all Azure activity logs available for the tenant
.EXAMPLE
Get-AzRMActivityLogs -stardate $startdate -enddate $enddate -SelectSubscription:$true
Get-AzRMActivityLogs -startdate $startdate -enddate $enddate -SelectSubscription:$true
Dump Azure activity logs for a given subscription in the tenant
#>

Expand Down
2 changes: 1 addition & 1 deletion DFIR-O365RC/Get-DefenderforO365.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
PS C:\>$enddate = get-date
PS C:\>$startdate = $enddate.adddays(-90)
PS C:\>Get-DefenderforO365 -stardate $startdate -enddate $enddate
PS C:\>Get-DefenderforO365 -startdate $startdate -enddate $enddate
Dump all Microsoft Defender for O365 logs
#>
Expand Down
6 changes: 3 additions & 3 deletions DFIR-O365RC/Get-O365Full.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -10,16 +10,16 @@ Function Get-O365Full {
PS C:\>$enddate = get-date
PS C:\>$startdate = $enddate.adddays(-7)
PS C:\>Get-O365Full -stardate $startdate -enddate $enddate -RecordSet "All"
PS C:\>Get-O365Full -startdate $startdate -enddate $enddate -RecordSet "All"
Dump all unified audit logs since last week
.EXAMPLE
Get-O365Full -stardate $startdate -enddate $enddate -RecordSet "ExchangeOnly" -logfile "UnifiedExchangeRecords.log"
Get-O365Full -startdate $startdate -enddate $enddate -RecordSet "ExchangeOnly" -logfile "UnifiedExchangeRecords.log"
Dump Exchange only records set since last week and write log to UnifiedExchangeRecords.log
.EXAMPLE
Get-O365Full -stardate $startdate -enddate $enddate -RecordTypes "Yammer" -logfile "UnifiedYammerOnly.log"
Get-O365Full -startdate $startdate -enddate $enddate -RecordTypes "Yammer" -logfile "UnifiedYammerOnly.log"
Dump Yammer records since last week and write log to UnifiedYammerOnly.log
#>

Expand Down
4 changes: 2 additions & 2 deletions DFIR-O365RC/Get-O365Light.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -8,11 +8,11 @@
PS C:\>$enddate = get-date
PS C:\>$startdate = $enddate.adddays(-90)
PS C:\>Get-O365Light -stardate $startdate -enddate $enddate
PS C:\>Get-O365Light -startdate $startdate -enddate $enddate
Dump all unified audit logs from the defined subset
.EXAMPLE
Get-O365Light -stardate $startdate -enddate $enddate -RecordSet "AzureADOnly" -logfile "UnifiedAzureADOnly.log"
Get-O365Light -startdate $startdate -enddate $enddate -RecordSet "AzureADOnly" -logfile "UnifiedAzureADOnly.log"
Dump AzureAD only operations since last week from the defined subset and write log to UnifiedAzureADOnly.log
#>

Expand Down
4 changes: 2 additions & 2 deletions DFIR-O365RC/Search-O365.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -8,12 +8,12 @@
PS C:\>$enddate = get-date
PS C:\>$startdate = $enddate.adddays(-90)
PS C:\>Search-O365 -stardate $startdate -enddate $enddate -Freetext "Python"
PS C:\>Search-O365 -startdate $startdate -enddate $enddate -Freetext "Python"
Search for Python user agent in unified audit logs
.EXAMPLE
Search-O365 -stardate $startdate -enddate $enddate -IPAddresses X.X.X.X
Search-O365 -startdate $startdate -enddate $enddate -IPAddresses X.X.X.X
Dump all the unified audit logs entries by the specified IP addresses. You specify multiple IP addresses separated by commas.
#>

Expand Down

0 comments on commit 55e26d1

Please sign in to comment.