topic Re: All O365 Miners have 0 indicators as of a few hours ago in General Topics

All O365 Miners have 0 indicators as of a few hours ago

korosy — Fri, 02 Nov 2018 03:53:02 GMT

All my other miners are working fine.

minemeld-engine: current: 0.9.50.post1 latest: 0.9.50.post1

Anyone else has the same problem?

Re: All O365 Miners have 0 indicators as of a few hours ago

lmori — Fri, 02 Nov 2018 08:29:27 GMT

MSFT switched to the new API. You should use the new O365 Miners for the new API. Details here: https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-using-MineMeld-Updated/ta-p/224148

Regards,

luigi

Re: All O365 Miners have 0 indicators as of a few hours ago

GregWasHere — Mon, 05 Nov 2018 16:02:54 GMT

It appears that this should only be used for the standalone MineMeld, is that correct? In the MineMeld that comes bundled with AutoFocus, I already see the API based miners. They are listed as experimental but they are there.

I'm curious b/c as of this morning all of my O365 miners have stopped working and when I try to use the new API ones, I get HTTP 400 errors.

Thanks!

Re: All O365 Miners have 0 indicators as of a few hours ago

lmori — Mon, 05 Nov 2018 16:09:13 GMT

Hi @GregWasHere,

please make sure you are running on 0.9.50. Miners were introduced in 0.9.48 but MSFT changed the API schema shortly after. The updated Miners were introduced in 0.9.50.

Thanks,

luigi

Re: All O365 Miners have 0 indicators as of a few hours ago

GregWasHere — Mon, 05 Nov 2018 20:37:53 GMT

Hi Luigi,

Thank you! I just upgraded to 0.9.50 inside of AutoFocus, created the new O365 API miners, and I'm pulling IPv4 addresses again.

Re: All O365 Miners have 0 indicators as of a few hours ago

Tony_Kiser — Tue, 06 Nov 2018 17:39:23 GMT

Hi Greg, how did you upgrade to 0.9.50 inside of Autofocus??

Re: All O365 Miners have 0 indicators as of a few hours ago

GregWasHere — Wed, 07 Nov 2018 13:25:31 GMT

Hey Tony,

I went to Apps and did a "Stop" on the MineMeld app. I then clicked the "Start" button for MineMeld and it upgraded during the restart of the app. I had some issues during the restart but they cleared up when I cleared the cache and history on my browser.

Hope this helps,

Greg