Skip to content

Include ResultSize Unlimited to truly get all mailboxes #1587

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dpaulson45 merged 1 commit into from
Mar 16, 2023
Merged

Include ResultSize Unlimited to truly get all mailboxes #1587

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions docs/Security/CVE-2023-23397/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -88,7 +88,7 @@ Optionally, you can use the Credential flag to provide admin credentials in PSCr
This syntax runs the script to audit all the mailboxes.

```powershell
PS C:\> Get-Mailbox | .\CVE-2023-23397.ps1 -Environment Onprem
PS C:\> Get-Mailbox -ResultSize Unlimited | .\CVE-2023-23397.ps1 -Environment Onprem
```

Note: If there are Exchange 2013 servers in the environment with Exchange 2016 or 2019, the script may not be able to open mailboxes on Exchange 2013 and may give the following error:
Expand All @@ -98,14 +98,14 @@ Note: If there are Exchange 2013 servers in the environment with Exchange 2016 o
If the above error appears, run the script with an additional parameter EWSExchange2013, as shown below.

```powershell
PS C:\> Get-Mailbox | .\CVE-2023-23397.ps1 -Environment Onprem -EWSExchange2013
PS C:\> Get-Mailbox -ResultSize Unlimited | .\CVE-2023-23397.ps1 -Environment Onprem -EWSExchange2013
```


This syntax runs the script to audit all mailboxes for items that were created during a specific period.

```powershell
PS C:\> Get-Mailbox | .\CVE-2023-23397.ps1 -Environment Onprem -StartTimeFilter "01/01/2023 00:00:00" -EndTimeFilter "01/01/2024 00:00:00"
PS C:\> Get-Mailbox -ResultSize Unlimited | .\CVE-2023-23397.ps1 -Environment Onprem -StartTimeFilter "01/01/2023 00:00:00" -EndTimeFilter "01/01/2024 00:00:00"
```


Expand Down Expand Up @@ -157,13 +157,13 @@ PS C:\> .\CVE-2023-23397.ps1 -DeleteAzureApplication
This syntax runs the script to Audit all mailboxes in Exchange Online.

```powershell
PS C:\> Get-Mailbox| .\CVE-2023-23397.ps1 -Environment "Online"
PS C:\> Get-Mailbox -ResultSize Unlimited | .\CVE-2023-23397.ps1 -Environment "Online"
```

This syntax runs the script to Audit all mailboxes for items that were during a specific period.

```powershell
PS C:\> Get-Mailbox | .\CVE-2023-23397.ps1 -Environment "Online" -StartTimeFilter "01/01/2023 00:00:00" -EndTimeFilter "01/01/2024 00:00:00"
PS C:\> Get-Mailbox -ResultSize Unlimited | .\CVE-2023-23397.ps1 -Environment "Online" -StartTimeFilter "01/01/2023 00:00:00" -EndTimeFilter "01/01/2024 00:00:00"
```

#### Cleanup Mode:
Expand All @@ -189,7 +189,7 @@ If there are Exchange 2013 servers in an environment with Exchange 2016 or Excha
If the above error appears, run the script with the EWSExchange2013 parameter:

```powershell
PS C:\> Get-Mailbox | .\CVE-2023-23397.ps1 -Environment Onprem -EWSExchange2013
PS C:\> Get-Mailbox -ResultSize Unlimited | .\CVE-2023-23397.ps1 -Environment Onprem -EWSExchange2013
```

### Blocked Autodiscover redirection
Expand Down