Microsoft-Extractor-Suite
3.0.0
Microsoft-Extractor-Suite is a fully-featured, actively-maintained, Powershell tool designed to streamline the process of collecting all necessary data and information from various sources within Microsoft.
Installation Options
Owners
Copyright
Copyright 2025 Invictus Incident Response
Package Details
Author(s)
- Joey Rentenaar & Korstiaan Stam
Functions
Connect-M365 Connect-Azure Connect-AzureAZ Disconnect-M365 Disconnect-Azure Disconnect-AzureAZ Get-UAL Get-UALGraph Get-UALStatistics Show-MailboxRules Get-MailboxRules Get-TransportRules Show-TransportRules Get-MailboxAuditLog Get-MessageTraceLog Get-EntraAuditLogs Get-EntraSignInLogs Get-OAuthPermissions Get-AdminAuditLog Get-ActivityLogs Get-DirectoryActivityLogs Get-GraphEntraSignInLogs Get-GraphEntraAuditLogs Get-Users Get-AdminUsers Get-MFA Get-RiskyUsers Get-RiskyDetections Get-ConditionalAccessPolicies Get-Email Get-Attachment Show-Email Get-Sessions Get-MessageIDs Get-MailboxAuditStatus Get-MailboxPermissions Get-Devices Start-EvidenceCollection Get-Licenses Get-LicenseCompatibility Get-EntraSecurityDefaults Get-LicensesByUser Get-Groups Get-GroupMembers Get-DynamicGroups
Dependencies
This module has no dependencies.
FileList
- Microsoft-Extractor-Suite.nuspec
- docs\source\functionality\M365\InboxRules.rst
- docs\source\functionality\M365\MailItemsAccessed.rst
- docs\source\functionality\M365\UnifiedAuditLogGraph.rst
- docs\source\installation\Microsoft-Extractor-Suite-Connect.png
- docs\source\project\KnownErrors.rst
- Scripts\Get-AdminAuditLog.ps1
- Scripts\Get-AzureActivityLogs.ps1
- Scripts\Get-AzureDirectoryActivityLogs.ps1
- Scripts\Get-Emails.ps1
- Scripts\Get-MailboxPermissions.ps1
- Scripts\Get-MFAStatus.ps1
- Scripts\Get-RiskyEvents.ps1
- Scripts\Get-UALGraph.ps1
- Microsoft-Extractor-Suite.psd1
- .github\FUNDING.yml
- docs\source\conf.py
- docs\source\functionality\Azure\AzureActivityLogs.rst
- docs\source\functionality\Azure\ConditionalAccessPolicies.rst
- docs\source\functionality\Azure\OAuthPermissions.rst
- docs\source\functionality\M365\MailboxAuditLog.rst
- docs\source\functionality\M365\MessageTraceLog.rst
- docs\source\functionality\Tools\EvidenceCollection.rst
- docs\source\installation\Prerequisites.rst
- Scripts\Connect.ps1
- Scripts\Get-AllEvidence.ps1
- Scripts\Get-AzureADGraphLogs.ps1
- Scripts\Get-ConditionalAccessPolicy.ps1
- Scripts\Get-Groups.ps1
- Scripts\Get-MailItemsAccessed.ps1
- Scripts\Get-OAuthPermissions.ps1
- Scripts\Get-Rules.ps1
- Scripts\Get-UALStatistics.ps1
- .readthedocs.yaml
- Microsoft-Extractor-Suite.psm1
- docs\make.bat
- docs\source\index.rst
- docs\source\functionality\Azure\AzureAuditLogsGraph.rst
- docs\source\functionality\Azure\Devices.rst
- docs\source\functionality\Azure\ProductLicenses.rst
- docs\source\functionality\M365\MailboxAuditStatus.rst
- docs\source\functionality\M365\TransportRules.rst
- docs\source\Images\Invictus-Incident-Response.jpg
- docs\source\project\Aboutus.rst
- Scripts\Disconnect.ps1
- Scripts\Get-AuditLogSettings.ps1
- Scripts\Get-AzureADLogs.ps1
- Scripts\Get-Devices.ps1
- Scripts\Get-MailboxAuditLog.ps1
- Scripts\Get-MessageTraceLog.ps1
- Scripts\Get-ProductLicenses.ps1
- Scripts\Get-UAL.ps1
- Scripts\Get-UsersInfo.ps1
- LICENSE
- pyproject.toml
- docs\Makefile
- docs\source\functionality\Azure\AzureActiveDirectoryAuditLog.rst
- docs\source\functionality\Azure\AzureDirectoryActivityLogs.rst
- docs\source\functionality\Azure\GetGroups.rst
- docs\source\functionality\M365\AdminAuditLog.rst
- docs\source\functionality\M365\MailboxDelegatedPermissions.rst
- docs\source\functionality\M365\UnifiedAuditLog.rst
- docs\source\installation\Installation.rst
- docs\source\project\FAQ.rst
- README.md
- docs\requirements.txt
- docs\source\functionality\Azure\AzureActiveDirectorysign-inlogs.rst
- docs\source\functionality\Azure\AzureSignInLogsGraph.rst
- docs\source\functionality\Azure\GetUserInfo.rst
- docs\source\functionality\M365\GetEmails.rst
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 3.0.1 | 32 | 1/24/2025 |
| 3.0.0 (current version) | 233 | 1/22/2025 |
| 2.1.1 | 4,269 | 10/29/2024 |
| 2.1.0 | 895 | 10/2/2024 |
| 2.0.3 | 333 | 9/23/2024 |
| 2.0.2 | 3,104 | 7/24/2024 |
| 2.0.0 | 1,142 | 6/26/2024 |
| 1.3.5 | 686 | 5/24/2024 |
| 1.3.4 | 568 | 4/29/2024 |
| 1.3.3 | 261 | 4/12/2024 |
| 1.3.2 | 208 | 3/26/2024 |
| 1.3.1 | 60 | 3/25/2024 |
| 1.3.0 | 40 | 3/21/2024 |
| 1.2.3 | 147 | 3/1/2024 |
| 1.2.2 | 113 | 2/23/2024 |
| 1.2.1 | 172 | 2/5/2024 |
| 1.2.0 | 161 | 1/23/2024 |
| 1.1.4 | 75 | 1/17/2024 |
| 1.1.3 | 522 | 9/26/2023 |
| 1.1.2 | 52 | 9/20/2023 |
| 1.1.1 | 19 | 9/13/2023 |