Ted Kolovos

> To recap progress so far, I shifted (almost) all the provider export functions over to using Invoke-MgGraphRequest instead of the powershell Graph SDK commandlets. > > The results make...

> Furthermore, of the remaining approximately 1:08 minutes required to run the AAD provider export, at least two thirds of that is due to consistent server-side delays. These delays arise...

Met with Thom today and he has completed almost all of the actions documented in the issue opener above. Excellent work! The only pending item is to get the POC...

Once this issue completed, the plan is to meet with CISA to determine if making changes to ScubaGear to acquire the missing fields is feasible.

### Summary 6/25/2024 I met with Thom today to chart a set of next steps. Here is a summary with action items. - Thom has taken a portion of MSAL.PS...

I verified that setting MS.SHAREPOINT.4.1v1 has been removed from the MS Sharepoint admin portal so we will be removing it from the baseline. That leaves the list of settings that...

Moving this to next release because I am continuing to test this and had to deprioritize due to functional test fixes and other bugs that came up, as well as...

### Wrap-up of this issue I created a [branch containing Thom's code](https://github.com/cisagov/ScubaGear/tree/957-POC-sharepoint-msal-rest-api) for this proof of concept. In that branch go to the **Thom-MSAL folder** and there is a README...

@Sloane4 @buidav Can you please test the instructions you hyperlinked above to add the SearchQueryInitiatedSharePoint and SearchQueryInitiatedExchange audit event against a couple of our tenants that have the required license...

@schrolla @ahuynhMITRE Noting this issue as a potential candidate for deferral to Flipper if necessary. This is given that the result of this issue may spark a baseline policy addition...