topic Re: Office 365 MineMeld Miner Will Need Updating in General Topics

Office 365 MineMeld Miner Will Need Updating

Tim_Grossner — Thu, 26 Jul 2018 17:56:09 GMT

Microsoft has announced a change to their Office 365 address and url documentation that I believe will need to be taken into account on the O365 miner in MM.

https://myitforum.com/microsoft-phasing-out-office-365-urls-and-ip-address-ranges-resource-on-october-2-2018/

Basically, they are phasing out the old documentation page, which I believe the miner uses today, and phasing in a REST based API for getting updates to this data.

Does anyone know if the authors of the current miner have plans to take this into account?

Thanks!

-Tim

Re: Office 365 MineMeld Miner Will Need Updating

lmori — Fri, 27 Jul 2018 12:57:49 GMT

Hi @Tim_Grossner,

good news! we already introduced the Miner for the new API in the 0.9.48!

Bad news is that MSFT has changed the API some days ago, we will release an update today to support these changes.

Thanks!

luigi

Re: Office 365 MineMeld Miner Will Need Updating

Tim_Grossner — Fri, 27 Jul 2018 13:38:43 GMT

Sorry, one quick followup question - Can I add the new api based miner, say off of prototype o365-api.worldwide-any, and have it input into the existing office365 ipv6/ipv4/url aggregators? Seems likely, but I just wanted to be sure.

Re: Office 365 MineMeld Miner Will Need Updating

xhoms — Tue, 31 Jul 2018 08:35:46 GMT

@Tim_Grossner,

yes, you can. Aggreagators will remove all duplicated indicators.

Re: Office 365 MineMeld Miner Will Need Updating

Tim_Grossner — Tue, 31 Jul 2018 18:39:32 GMT

Worked great in the lab.

Thanks again!

Re: Office 365 MineMeld Miner Will Need Updating

alterioc — Tue, 31 Jul 2018 20:37:34 GMT

Hi, is there a new API miner for MS Teams? I upgraded to 0.9.50 but don't see one. Thanks!

Re: Office 365 MineMeld Miner Will Need Updating

xhoms — Wed, 01 Aug 2018 08:22:11 GMT

Hi @alterioc,

I'm afraid the new API does not provide a method to extract the indicators for just the Teams application.

In the following page https://support.office.com/en-us/article/managing-office-365-endpoints-99cab9d4-ef59-4207-9f2b-3728eb46bf9a#webservice you'll find details for the new API.

It is stated there that ... Valid items are Common,Exchange,SharePoint,Skype ... No specific ServiceArea for MS Teams

Re: Office 365 MineMeld Miner Will Need Updating

RahulBritto — Fri, 13 Sep 2019 08:57:29 GMT

Hi Xhoms,

As per the following url both Skype and Teams are listed with the same service area display name. Hence can I use the same prototype o365-api.worldwide-skype for teams as well?

https://endpoints.office.com/endpoints/worldwide

Thanks in advance,

Rahul

Re: Office 365 MineMeld Miner Will Need Updating

lmori — Tue, 17 Sep 2019 13:17:23 GMT

Hi @RahulBritto,

worldwide-skype retrives worldwide endpoint for Skype service area that includes both skype and teams.