Defender

The ExchangeOnlineManagement PowerShell module is used to connect to Exchange and Defender. This module may already exist on your computer, or you might have installed it previously with Initialize-SCuBA (see the dependencies page). When running ScubaGear against Defender, you may see a connection error about OAuth in the Powershell window:

WARNING: Please note that you can only use above 9 new EXO cmdlets (the one with -EXO naming pattern). You can’t use other cmdlets as we couldn’t establish a Remote PowerShell session as basic auth is disabled in your client machine. To enable Basic Auth, please check instruction here https://docs.microsoft.com/en-us/powershell/exchange/exchange-online-powershell-v2?view=exchange-ps#prerequisites-for-the-exo-v2-module Create Powershell Session is failed using OAuth.

If you see this error message, it means that you are running a version of the the module that is less than version 3.2. The automation relies on the Microsoft Security & Compliance PowerShell environment for Defender information. Security & Compliance PowerShell connections, unlike other services used by the ExchangeOnlineManagement module, require basic authentication to be enabled. As of June 2023, Microsoft has deprecated Remote PowerShell for Exchange Online and Security & Compliance PowerShell. To resolve this error, you should run the Initialize-SCuBA cmdlet (see the dependencies page), which should install the latest ExchangeOnlineManagement module version.