v21.03.12.1602

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.11.1659
CompareExchangeHashes.ps1	v21.03.12.0437
ExchangeMitigations.ps1	v21.03.11.1659
Test-ProxyLogon.ps1	v21.03.12.1433
CopyMissingDlls.ps1	v21.03.12.1521
SetupAssist.ps1	v21.03.11.1359
SetupLogReviewer.ps1	v21.03.10.2022

Changes:

• 9b7d274 Merge pull request #335 from microsoft/main
• a8a5734 Merge pull request #334 from microsoft/dpaul-setup
• 2aedab0 Merge branch 'dpaul-setup' of https://github.com/microsoft/CSS-Exchange into dpaul-setup
• f9ed108 Using -not instead of !
• 66ca3f9 Removed additional code comments
• f85e569 Merge branch 'main' into dpaul-setup
• 2751031 Moved ConvertPrStartTime to not publish
• 503fbd7 Updated Build Pipeline for not to publish ".NotPublished.ps1" scripts
• 3cd8d43 Created CopyMissingDlls
• 3805122 Merge pull request #333 from microsoft/bill-long-patch-1

See More

• 3c25c65 Update issue templates

This list of changes was auto generated.

v21.03.12.1448

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
ConvertPrStartTime.ps1	v21.03.10.0325
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.11.1659
CompareExchangeHashes.ps1	v21.03.12.0437
ExchangeMitigations.ps1	v21.03.11.1659
Test-ProxyLogon.ps1	v21.03.12.1433
SetupAssist.ps1	v21.03.11.1359
SetupLogReviewer.ps1	v21.03.10.2022

Changes:

• 6a700e7 Merge pull request #332 from microsoft/main
• 5c10ebb Merge pull request #331 from microsoft/bilong-singlehit
• b01d806 Merge branch 'main' into bilong-singlehit
• 13b7252 Merge pull request #330 from microsoft/bilong-faq
• c6c80b4 Fix single hit problem for 26855 test [ #184 ]
• 13e7926 Add FAQ

This list of changes was auto generated.

v21.03.12.0547

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
ConvertPrStartTime.ps1	v21.03.10.0325
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.11.1659
CompareExchangeHashes.ps1	v21.03.12.0437
ExchangeMitigations.ps1	v21.03.11.1659
Test-ProxyLogon.ps1	v21.03.11.1857
SetupAssist.ps1	v21.03.11.1359
SetupLogReviewer.ps1	v21.03.10.2022

Changes:

• fb446d7 Merge pull request #316 from microsoft/main
• 21b568a Merge pull request #315 from microsoft/morebaselines
• fb3b05c Add baselines
• 4905deb Revert "Add baselines"
• a826d03 Add baselines

This list of changes was auto generated.

v21.03.11.2127

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
ConvertPrStartTime.ps1	v21.03.10.0325
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.11.1659
CompareExchangeHashes.ps1	v21.03.11.1736
ExchangeMitigations.ps1	v21.03.11.1659
Test-ProxyLogon.ps1	v21.03.11.1857
SetupAssist.ps1	v21.03.11.1359
SetupLogReviewer.ps1	v21.03.10.2022

Changes:

• ae33b9f Merge pull request #307 from microsoft/main
• a138ac4 Merge pull request #306 from justinhendricksmsft/main
• 7b36a8c Merge branch 'main' into main
• 934f482 Merge pull request #304 from tweekerz/main
• df6e0e2 Adding back .gitignore
• f7d2d72 Delete .gitignore
• 19778cd Update to Test-ProxyLogon.ps1 to ignore autodiscover requests and localhost as there are too many false positives. Only having autodiscover in the logs means the attacker did not find a valid email address. Other log entries do indicate further exploitation that needs to be investigated.
• 0a8a7dc Merge branch 'main' into main
• 3575470 I added the direct download links to the README.md

This list of changes was auto generated.

v21.03.11.1838

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
ConvertPrStartTime.ps1	v21.03.10.0325
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.11.1659
CompareExchangeHashes.ps1	v21.03.11.1736
ExchangeMitigations.ps1	v21.03.11.1659
Test-ProxyLogon.ps1	v21.03.11.0157
SetupAssist.ps1	v21.03.11.1359
SetupLogReviewer.ps1	v21.03.10.2022

Changes:

• 33125a3 Merge pull request #302 from microsoft/main
• be84b99 Merge pull request #301 from Varbin/use-basic-parsing
• a3425d0 Use basic parsing for IWR.
• 03a75b6 Merge pull request #298 from dbacon247/mitigationfixes
• c7519cb Merge branch 'main' into mitigationfixes
• 3b45db8 changed inital name param search from IIS to IIS to resolve localization issues
• 14c2ab9 Merge pull request #297 from microsoft/bilong-readme
• d88ed08 Readme update

This list of changes was auto generated.

v21.03.11.1408

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
ConvertPrStartTime.ps1	v21.03.10.0325
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.11.0157
CompareExchangeHashes.ps1	v21.03.11.0620
ExchangeMitigations.ps1	v21.03.11.0157
Test-ProxyLogon.ps1	v21.03.11.0157
SetupAssist.ps1	v21.03.11.1359
SetupLogReviewer.ps1	v21.03.10.2022

Changes:

• 3a0aebf Merge pull request #288 from microsoft/main
• dddbfa6 Merge pull request #286 from microsoft/bilong-setupfix
• 042e9e1 Build issue

This list of changes was auto generated.

v21.03.11.0632

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
ConvertPrStartTime.ps1	v21.03.10.0325
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.11.0157
CompareExchangeHashes.ps1	v21.03.11.0620
ExchangeMitigations.ps1	v21.03.11.0157
Test-ProxyLogon.ps1	v21.03.11.0157
SetupAssist.ps1	v21.03.11.0454
SetupLogReviewer.ps1	v21.03.10.2022

Changes:

• a84654c Merge pull request #274 from microsoft/main
• f8e6596 Merge pull request #273 from microsoft/compress
• e6d04b8 Add functionality to create a zip of all the interesting files to be uploaded to widc
• 30f43d1 Merge pull request #272 from microsoft/zip
• f6ec155 Merge branch 'main' into zip
• e09f7f8 Merge pull request #271 from microsoft/bilong-setupassist
• 719543c Add baselines.
• de04bb0 Improve otherWellKnownObjects parsing
• 1d3c5fe Merge pull request #266 from microsoft/bilong-subfolder
• dee1c6b Update build pipeline

See More

• c4fc23c Rename
• 77730dc A little more subtle
• 7217f22 Move scripts and adjust readme

This list of changes was auto generated.

v21.03.10.2314

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
ConvertPrStartTime.ps1	v21.03.10.0325
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.10.1912
CompareExchangeHashes.ps1	v21.03.10.2250
ExchangeMitigations.ps1	v21.03.10.1912
Test-ProxyLogon.ps1	v21.03.10.1813
SetupAssist.ps1	v21.03.10.2022
SetupLogReviewer.ps1	v21.03.10.2022

Changes:

• d13894f Merge pull request #257 from microsoft/main
• 59ace25 Merge pull request #252 from microsoft/cpmerge
• 7db7902 Merge branch 'main' into cpmerge
• 3982533 fix datetimes
• a714be5 fix
• 4ec395f fix
• 2fc3a7d fix
• 7728ccf Merge pull request #255 from microsoft/bilong-setupassist
• ca9d58c fix
• dbc4a34 Merge branch 'cpmerge' of https://github.com/microsoft/CSS-Exchange into cpmerge

See More

• 5e77d46 fix
• 47312b9 Simplify syntax for otherWellKnownObjects problem
• 809e1b5 Merge branch 'main' into cpmerge
• 7416568 Merge changes
• ffb4603 Merge pull request #249 from microsoft/bilong-readme
• d786b9a Merge branch 'main' into bilong-readme
• 474afc8 Make download links more prominent
• fd96acb Merge branch 'main' into bilong-readme
• 350b990 Make the script titles link to release

This list of changes was auto generated.

v21.03.10.1923

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
ConvertPrStartTime.ps1	v21.03.10.0325
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.10.1912
CompareExchangeHashes.ps1	v21.03.10.1825
ExchangeMitigations.ps1	v21.03.10.1912
Test-ProxyLogon.ps1	v21.03.10.1813
SetupAssist.ps1	v21.03.08.0227
SetupLogReviewer.ps1	v21.03.09.0437

Changes:

• 7fae990 Merge pull request #248 from microsoft/main
• bebb33d Merge pull request #246 from dbacon247/mitigationscriptfixes
• 6734f43 Merge branch 'main' into mitigationscriptfixes
• 01a1652 fixed missed Get-InstallSoftware line
• 92dd49a Merge pull request #244 from microsoft/baseupdate
• 7082c34 Merge branch 'main' into baseupdate
• bbd880d Merge pull request #243 from microsoft/dpaul-ZipDateTime
• 7196644 style
• 6b0bfa9 Add baselines
• c150451 Merge branch 'main' into dpaul-ZipDateTime

See More

• ad6f753 Merge pull request #242 from microsoft/anshuldube-patch-1
• 62068de Add LastWriteTimeUtc to object info of dump files
• 7e61f31 clarify readme
• 30bc55c Merge pull request #239 from nashiooka/main
• ff6dba9 Formatting
• 3c7fb46 Merge branch 'main' of https://github.com/microsoft/CSS-Exchange into main
• 74e5f04 Update Get-SuspiciousFiles
• d58b2f6 Improvements to Get-SuspiciousFiles

This list of changes was auto generated.

v21.03.10.1625

Script Versions

Script	Version
VSSTester.ps1	v21.02.08.1722
Analyze-SpaceDump.ps1	v21.01.08.0350
Compare-MailboxStatistics.ps1	v21.01.08.0350
ExTRA.ps1	v21.02.22.1752
Test-HMAEAS.ps1	v21.03.10.0325
ExPerfAnalyzer.ps1	v21.01.08.0350
RemoveInvalidPermissions.ps1	v21.02.23.0246
ValidateMailEnabledPublicFolders.ps1	v21.03.01.2321
SourceSideValidations.ps1	v21.02.22.1721
ConvertPrStartTime.ps1	v21.03.10.0325
Get-MRMDetails.ps1	v21.03.10.0325
BackendCookieMitigation.ps1	v21.03.10.1543
CompareExchangeHashes.ps1	v21.03.10.0536
ExchangeMitigations.ps1	v21.03.10.1543
Test-ProxyLogon.ps1	v21.03.10.1549
SetupAssist.ps1	v21.03.08.0227
SetupLogReviewer.ps1	v21.03.09.0437

Changes:

• 5706448 Merge pull request #238 from microsoft/main
• d4e4976 Merge pull request #236 from microsoft/bilong-computername
• 6201098 Add back the ability to run without ComputerName
• bdc74df Merge pull request #233 from dbacon247/mitigationscriptfixes
• 65cc5ef fixed code formatting issues
• 5609a39 Searching for IIS with name param on Get-InstalledSoftware
• cdf1efd Merge pull request #225 from FriedrichWeinmann/main
• ae6a2da Keep progress bars from overwriting each other
• b280887 Merge branch 'main' into main
• 23155c7 Merge pull request #226 from TristankMS/main

See More

• 4b94757 typo in patternsyntax
• d98ac9b replacing tabs in help
• 5ec1f0c Adding parallel processing, exposing credential
• 81dfc70 Merge pull request #1 from microsoft/main

This list of changes was auto generated.