silverhack / silverhack/monkey365

[Bug]: A limited number of Monkey365 collectors no longer works due to changes in M365 Admin portal domain

Open
#175 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

breaking-change bug documentation impact-low priority-high status/In Progress
Dominant language
PowerShell
Stars
1.3k
Forks
140
PR merge metrics
No merged PRs in 30d

Description

What happened?
A limited number of Monkey365 collectors, such as the Forms and Sway collectors that relying on the undocumented Microsoft 365 Admin Portal APIs are no longer working as expected.

Microsoft has recently transitioned the Microsoft 365 Admin Portal to the cloud.microsoft domain as part of their ongoing security hardening efforts. As a result, the legacy https://admin.microsoft.com/api endpoint is returning unexpected results, breaking collectors that depend on them.

The affected collectors are:

  • Get-MonkeyFormsUserInfo
  • Get-MonkeyFormsTenantInformation
  • Get-MonkeySwaySharingInfo
  • Get-MonkeyM365ThirdPartyStorageConfig
  • Get-MonkeyM365CortanaAppConfig
  • Get-MonkeyM365DNSInfo

Monkey365 collectors that rely on these endpoints will not work.

Next Steps

For now, those collectors are deprecated and will be removed in next releases of Monkey365. Additionally, the following collectors will be updated to use Microsoft Graph API calls:

  • Get-MonkeyFormsTenantInformation
  • Get-MonkeyM365ThirdPartyStorageConfig

More info

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Locate the six affected PowerShell collectors, especially Get-MonkeyFormsTenantInformation and Get-MonkeyM365ThirdPartyStorageConfig, and inspect their calls to the legacy admin.microsoft.com/api endpoint. Confirm the current Microsoft Graph API paths for the two collectors slated for migration, and verify that the remaining deprecated collectors are removed or disabled as intended in a subsequent release.

Written by the indexing model from the issue text.

Assessment

Tech stack
powershell
Domain
cloud, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.