Solarwinds Breach Update | UCG is formed and CISA release a Free Tool - Sparrow.ps1 | EP3

[@troymccartney1651]

If I'm not mistaken, it is assumed that the user of this script has been issued an O365 E3 or E5 license and that their daily user account has been provisioned with these elevated privileges? It appears that if you are using an account that is dedicated to administration, auditing, etc., and has not been assigned a license, the script will fail to produce any of the reports seen in this video. Am I right?

[@ianthecat2541]

good stuff! apparently, i keep getting stuck after searching for powershell logins using known ps application ids in the UAL with my own upn. Does it mean that I am the only one running ps-based logins in our environment?

[@doyou121]

Any help with why I don't see any Azure Environments to choose from when I run the script? I've yet to find any resource support online for Sparrow Script

[@ggmz5585]

Chimychanga

[@leolldankology]

Guacamole in my chues.

[@TeachJing]

I’m so confused!

[@leolldankology]

@@TeachJing flauta