Office 365 MineMeld Miner Will Need Updating

[Tim_Grossner]

Microsoft has announced a change to their Office 365 address and url documentation that I believe will need to be taken into account on the O365 miner in MM.

https://myitforum.com/microsoft-phasing-out-office-365-urls-and-ip-address-ranges-resource-on-octobe...

Basically, they are phasing out the old documentation page, which I believe the miner uses today, and phasing in a REST based API for getting updates to this data.

Does anyone know if the authors of the current miner have plans to take this into account?

Thanks!

-Tim

[lmori · Accepted solution]

Hi @Tim_Grossner,

good news! we already introduced the Miner for the new API in the 0.9.48!

Bad news is that MSFT has changed the API some days ago, we will release an update today to support these changes.

Thanks!

luigi

[Tim_Grossner]

Sorry, one quick followup question - Can I add the new api based miner, say off of prototype o365-api.worldwide-any, and have it input into the existing office365 ipv6/ipv4/url aggregators? Seems likely, but I just wanted to be sure.

[xhoms]

@Tim_Grossner,

yes, you can. Aggreagators will remove all duplicated indicators.

[Tim_Grossner]

Worked great in the lab. 

Thanks again!

[alterioc]

Hi, is there a new API miner for MS Teams? I upgraded to 0.9.50 but don't see one. Thanks!

[xhoms]

Hi @alterioc,

I'm afraid the new API does not provide a method to extract the indicators for just the Teams application.

In the following page https://support.office.com/en-us/article/managing-office-365-endpoints-99cab9d4-ef59-4207-9f2b-3728e... you'll find details for the new API.

It is stated there that ... Valid items are Common,Exchange,SharePoint,Skype ... No specific ServiceArea for MS Teams

[RahulBritto]

Hi Xhoms,

As per the following url both Skype and Teams are listed with the same service area display name. Hence can I use the same prototype o365-api.worldwide-skype for teams as well?

https://endpoints.office.com/endpoints/worldwide

Thanks in advance,

Rahul

[lmori]

Hi @RahulBritto,

worldwide-skype retrives worldwide endpoint for Skype service area that includes both skype and teams.