hawk
hawk copied to clipboard
T0pCyber
Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
**Is your feature request related to a problem? Please describe.** The Search-AdminAuditLog cmdlet defaults to 1000 results. When using the HAWK Search-HawkTenantEXOAuditLog cmdlet, I've run into this limit multiple times,...
**Describe the bug** When running the Search-HawkTenantEXOAuditLog cmdlet I see the following line in the output: ## Investigate ## - Found 406 email addresses set to be forwarded mail The...
**Describe the bug** I'm getting multiple instances of this error when running a user analysis. [6/9/2022 3:57:17 PM] - Converting AuditData [6/9/2022 3:57:17 PM] - [ERROR] - 0 Entries failed...
**Describe the bug** When doing a user investigation, getting the error: Loading Networking functions from C:\Program Files\WindowsPowerShell\Modules\HAWK\3.0 .0\System.Net.IPNetwork.dll Exception calling "LoadFile" with "1" argument(s): "The system cannot find the file...
Need to update all older Exchange Online cmdlets if required.
Review all the code to remove MSOnline required cmdlets and update to V2 Azure AD cmdlets. Update Folder Name Creation to use AAD Module
Update Hawk with Solarwinds IOCs.
I recently got a new computer, ran Hawk for the first time for a long time and was not prompted to enter the geoip access key. As a result, all...
The Search-UnifiedAuditLog command that gets generated seems to generate with dates and times in the local format. As a UK native our format of dd/mm/yyyy does not get accepted by...
