silverhack / silverhack/monkey365
[Bug]: A limited number of Monkey365 collectors no longer works due to changes in M365 Admin portal domain
Nobody has claimed this yet.
- Dominant language
- PowerShell
- Stars
- 1.3k
- Forks
- 140
- PR merge metrics
- No merged PRs in 30d
Description
What happened?
A limited number of Monkey365 collectors, such as the Forms and Sway collectors that relying on the undocumented Microsoft 365 Admin Portal APIs are no longer working as expected.
Microsoft has recently transitioned the Microsoft 365 Admin Portal to the cloud.microsoft domain as part of their ongoing security hardening efforts. As a result, the legacy https://admin.microsoft.com/api endpoint is returning unexpected results, breaking collectors that depend on them.
The affected collectors are:
- Get-MonkeyFormsUserInfo
- Get-MonkeyFormsTenantInformation
- Get-MonkeySwaySharingInfo
- Get-MonkeyM365ThirdPartyStorageConfig
- Get-MonkeyM365CortanaAppConfig
- Get-MonkeyM365DNSInfo
Monkey365 collectors that rely on these endpoints will not work.
Next Steps
For now, those collectors are deprecated and will be removed in next releases of Monkey365. Additionally, the following collectors will be updated to use Microsoft Graph API calls:
- Get-MonkeyFormsTenantInformation
- Get-MonkeyM365ThirdPartyStorageConfig
More info
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the six affected PowerShell collectors, especially Get-MonkeyFormsTenantInformation and Get-MonkeyM365ThirdPartyStorageConfig, and inspect their calls to the legacy admin.microsoft.com/api endpoint. Confirm the current Microsoft Graph API paths for the two collectors slated for migration, and verify that the remaining deprecated collectors are removed or disabled as intended in a subsequent release.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- powershell
- Domain
- cloud, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100