Office 365 Regex credit card about mailsniper HOT 6 CLOSED

Ah, I think i found the problem. I use a system with german language and german office 365. If iuse use the -folder all parameter it works. Seems it does not work because of the default folder "inbox".

from mailsniper.

Hey man, I won't be able to troubleshoot this until next week but the first thing I would mention is that the regex is looking for VISA, MasterCard, and American Express numbers. So if the cards in your mailbox aren't one of those then it won't find it. Also, are the card numbers in the body of the email or in the attachments. I see you are using the -CheckAttachments option.

from mailsniper.

Hi,
thanks for your response. The regex is not the problem. I sent myself an email with subject "Password" and also with "Password" in the Body and just tried the default settings. But I think that the Connection to EWS is not working or the session is just closing because after

[] Using EWS URL https://outlook.office365.com/EWS/Exchange.asmx

Nothing happens... In your Blogpost there is a screenshot with "Now searching..." But I never see something I like that...

I also checked that I have the rights for EWS.

from mailsniper.

Oh that is an odd issue. I would also assume that the connection isn't working to EWS... At that point in the script it should actually be trying to bind to the Inbox. I will check it out next week and see if I can replicate the issue.

from mailsniper.

Any updates?

from mailsniper.

I just tested it and it seems to be working for me. I used the following command to search for 'password' against an O365 account and it found my test email with the term password in the body.

PS C:\> Invoke-SelfSearch -ExchHostname outlook.office365.com -Terms "*password*" -Remote -Mailbox [email protected]

[*] Trying Exchange version Exchange2010

cmdlet Get-Credential at command pipeline position 1
Supply values for the following parameters:
Credential
[*] Using EWS URL https://outlook.office365.com/EWS/Exchange.asmx
[***] Found folder: Inbox
[*] Now searching mailbox: [email protected] for the terms *password*.

Sender                                      ReceivedBy                             Subject          Body
------                                        ------                                       ------             ------
[email protected]   [email protected]    Test Email   This message has a password in it...

If authentication was failing for you I believe you would see at least an error stating the request failed so it's probably not that. What version of PowerShell are you running and what OS? Also, can you try logging directly in to EWS with a browser at https://outlook.office365.com/EWS/Exchange.asmx? You should see the Service page after logging in there if it was successful.

from mailsniper.