[Bug]: A limited number of Monkey365 collectors no longer works due to changes in M365 Admin portal domain

[silverhack]

What happened?
A limited number of Monkey365 collectors, such as the Forms and Sway collectors that relying on the undocumented Microsoft 365 Admin Portal APIs are no longer working as expected.

Microsoft has recently transitioned the Microsoft 365 Admin Portal to the cloud.microsoft domain as part of their ongoing security hardening efforts. As a result, the legacy https://admin.microsoft.com/api endpoint is returning unexpected results, breaking collectors that depend on them.

The affected collectors are:

• Get-MonkeyFormsUserInfo
• Get-MonkeyFormsTenantInformation
• Get-MonkeySwaySharingInfo
• Get-MonkeyM365ThirdPartyStorageConfig
• Get-MonkeyM365CortanaAppConfig
• Get-MonkeyM365DNSInfo

Monkey365 collectors that rely on these endpoints will not work.

Next Steps

For now, those collectors are deprecated and will be removed in next releases of Monkey365. Additionally, the following collectors will be updated to use Microsoft Graph API calls:

• Get-MonkeyFormsTenantInformation
• Get-MonkeyM365ThirdPartyStorageConfig

More info

• https://techcommunity.microsoft.com/blog/microsoft_365blog/introducing-cloud-microsoft-a-unified-domain-for-microsoft-365-apps-and-services/3804961
• https://feedbackportal.microsoft.com/feedback/idea/1b538889-b084-f011-8151-7c1e529deacc