JoeyInvictus

Results 37 comments of JoeyInvictus

[Bug] - Get-ActivityLogs - Null error returned for subscriptions with no logs

Great catch! We're on it and will incorporate a fix in our upcoming update. We're aiming to roll this out by the end of the week.

[Bug] - Get-ActivityLogs - Null error returned for subscriptions with no logs

Hi, the update is live. The error shouldn't happen anymore, let me know if it works as expected. If so, I will close the issue.

[Bug] - Get-ActivityLogs - Null error returned for subscriptions with no logs

Will try to add one in the next update!

[Bug] - Get-ActivityLogs - Null error returned for subscriptions with no logs

Hi, hope you are doing well! I just added the Try/Catch part as requested :).

AAD: DiagnosticSettings API does not support bearer auth using a service principal

Any update?

Issue in using "Get-ADAuditLogs"

Hi, What version of the Extractor Suite are you running, and could you share the command you executed? We did some testing, and everything seems to work fine for us....

Issue in using "Get-ADAuditLogs"

Thanks for your reply. Currently, the supported time format is limited to yyyy-mm-dd. Could you try again using this format? ![image](https://github.com/invictus-ir/Microsoft-Extractor-Suite/assets/129975292/3944c7c7-ff2f-4792-a76e-067a4efd0d23) Link to docs: https://microsoft-365-extractor-suite.readthedocs.io/en/latest/functionality/AzureActiveDirectoryAuditLog.html

Issue in using "Get-ADAuditLogs"

Are you trying to retrieve the logs from 2024-01-04 or 2024-04-01 (yyyy-mm-dd)? Since 2024-01 should work because of the retention of the Audit Logs. When I run the tool with...

Issue in using "Get-ADAuditLogs"

Hmm, strange. I am unable to reproduce the error, and I asked some other users, who confirmed that it seems to work fine for them as well. The logic for...

Issue in using "Get-ADAuditLogs"

@apps-dfir I just pushed the update from @angry-bender to the main branch. Could you check if you are running into the same issues while using the new version? (I haven't...