Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions Security/src/CVE-2023-23397/CVE-2023-23397.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -770,12 +770,15 @@ begin {
($UseSearchFolders -eq $false) -and
($SearchFolderCleanup -eq $false)) {
$newSearchFeatureWording = "Did you know?" +
"`nWe've introduced a new asynchronous search feature (preview) in this version to improve the performance of the search." +
"`nIt's disabled by default and can be enabled by using the following parameters:" +
"`nThe new asynchronous search feature is now general available (GA)!" +
"`nWe recommend using it because the search performance is significantly increased." +
"`nYou can enable it by using the the following parameters:" +
"`n" +
"`nUseSearchFolders: Enable deep-traversal SearchFolders search to significantly improve performance" +
"`nSearchFolderCleanup: Clean up any SearchFolders left behind by the -UseSearchFolders switch" +
"`n" +
"`nThis version of the script also supports Certificate Based Authentication (CBA)" +
"`n" +
"`nMore information: https://aka.ms/CVE-2023-23397ScriptDocFAQ"
Write-Host ""
Write-Host $newSearchFeatureWording -ForegroundColor Cyan
Expand Down
7 changes: 2 additions & 5 deletions docs/Security/CVE-2023-23397/FAQ.md
Original file line number Diff line number Diff line change
@@ -1,18 +1,15 @@
# CVE-2023-23397 Frequently Asked Questions

## What is the -UseSearchFolders preview feature?
## What is the -UseSearchFolders feature?

This feature changes the way Audit mode works to be dramatically faster in most environments. The original approach searches
folders synchronously one by one. When using the new switch, we perform two passes. In the first pass, we create a search
folder that searches the whole mailbox. In the second pass, we collect the results. This often reduces the time to run the
Audit mode by 80% or more.

This feature is still considered a preview. The old behavior can be used by simply not including the
-UseSearchFolders parameter.

To use the new feature, use the same syntax as before, but add -UseSearchFolders. For example:

**NOTE:** Connect to EXO with [Exchange Online PowerShell session](https://learn.microsoft.com/en-us/powershell/exchange/connect-to-exchange-online-powershell?view=exchange-ps)
**NOTE:** Connect to EXO with [Exchange Online PowerShell session](https://learn.microsoft.com/powershell/exchange/connect-to-exchange-online-powershell?view=exchange-ps)

```powershell
Get-EXOMailbox -ResultSize Unlimited | .\CVE-2023-23397.ps1 -Environment Online -UseSearchFolders
Expand Down
2 changes: 2 additions & 0 deletions docs/Security/CVE-2023-23397/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -102,6 +102,8 @@ ScriptUpdateOnly | This optional parameter allows you to only update the script
SkipVersionCheck | This optional parameter allows you to skip the automatic version check and script update.
IgnoreCertificateMismatch | This optional parameter lets you ignore TLS certificate mismatch errors.
Credential | This optional parameter lets you pass admin credentials when running on Exchange Server.
UseSearchFolders | This parameter causes the script to use deep-traversal search folders, significantly improving performance.
SearchFolderCleanup | This parameter cleans up any search folders left behind by the asynchronous search feature. It must be used together with the `UseSearchFolders` parameter.
TimeoutSeconds | This optional parameter specifies the timeout on the EWS ExchangeService object. The default is 300 seconds (5 minutes).

#### Set Exchange Online Cloud Specific values:
Expand Down