search

soteria-security / 365Inspect

A PowerShell script that automates the security assessment of Microsoft 365 environments.
https://soteria.io/solutions/soteria-inspect/
MIT License
561 stars 105 forks source link

Does this work in M365 GCC High? #76

Closed mike16329 closed 6 months ago

mike16329 commented 8 months ago

Does this work in M365 GCC High?

ThoughtContagion commented 8 months ago

This tool is designed to run in any environment so long as you hold the appropriate permissions. That said, Microsoft does restrict some functionality in GCC High environments to comply with those requirements and we have not had the fortune to test in a GCC High environment yet. We would certainly be interested to know of any issues or your experience in general.

mike16329 commented 8 months ago

Ok thanks! I know that GCC High uses the login.microsoftonline.us URL instead of login.microsoftonline.com URL, would this cause issues with any of the script(s)?

ThoughtContagion commented 8 months ago

This would only affect the wrapper script - 365Inspect.ps1, where authentication calls are sent to Microsoft. We are pushing a change to the tool shortly and will take it as an action item to include this functionality to choose the Microsoft environment.

mike16329 commented 8 months ago

Thanks! I know too for GCC High the graph url needs to be graph.microsoft.us not graph.microsoft.com