HAWK

Author(s)

• hawk_feedback@microsoft.com

Tags

O365 Security Audit Breach Investigation Exchange EXO Compliance Logon

Functions

Compress-HawkData Get-HawkTenantConfiguration Get-HawkTenantEDiscoveryConfiguration Get-HawkUserForwarding Get-HawkUserAuthHistory Get-HawkUserConfiguration Get-HawkUserMailboxAuditing Get-HawkUserInboxRule Initialize-HawkGlobalObject Search-HawkTenantEXOAuditLog Search-HawkTenantActivityByIP Start-HawkTenantInvestigation Start-HawkUserInvestigation Get-HawkTenantRBACChanges Show-HawkHelp Get-HawkTenantInboxRules Update-HawkModule Get-HawkTenantOauthConsentGrants

Dependencies

This module has no dependencies.

Release Notes

1.0.0 - BREAKING CHANGE - HawkUser cmdlets now take -UserPrincipalName instead of -User
1.0.0 - -UserPrincipalName supports providing list of UPNs or array of objects with UserPrincipalName properties
1.0.0 - Fixed minor issue with incorrect output to the screen when testing for EXO connections
28.5 - Added command Get-HawkTenantOauthConsentGrants for gathering Oauth grant information (more cmdlets coming in this vein)
28.4 - Removed test code that was blocking update-hawkmodule from updating the module
28.3 - Initialize-HawkGlobalObject now calls the new Update-HawkModule cmdlet
28.3 - New Cmdlet Update-HawkModule that will check for and install the latest version of Hawk
28.2 - Updated meta data to make module easier to find in search.