Update V2.1.1 - Updates & Improvements
Improvements
- Accepted pull request from @angry-bender updating the date format in
Get-UALGraphfor improved readability and consistency. - Corrected a typo in the $filePath variable when using the
-Downloadflag inGet-MessageIDs. - Implemented suggestions from @Calvindd2f to add additional parameters for connection scripts. Users can now connect using an access token.
- Reworked the
$areYouConnectedfunctionality for the UAL scripts. - Introduced the
-Allparameter toGet-ADAuditLogsGraph. By default, filtering with the UserIds field retrieves only actions directly performed by the specified user. With the new-Allflag, the command now includes all related events involving the user, such as events where an MFA device was added for them. - Fixed an issue where the merge output would throw "out of memory" errors. Now, while merging the output files, each file is written directly to the merged output file instead of reading everything into memory first and then saving it.
As suggested by @evild3ad:
- Updated the import command:
Import-Module .\Microsoft-Extractor-Suite.psm1 -ArgumentList $trueto suppress the logo output, optimizing it for automation scenarios. - Replaced remaining
Write-Hostcommands inGet-Rules.ps1with the customWrite-LogFilefunction for consistent logging. - Fixed an issue in
Get-MailboxRuleswhere using the-UserIDsflag with no rules found would incorrectly display the total inbox rules. - Added support for the
-UserIdsflag to Risky Users and Detections. - Added support for the
-UserIdsflag to the Get-MFA functionality.