I have several domains I would like to use the CISA sparrow.ps1 script to analyze for SUNBURST IOC’s but none of the domains have O365 email.
When I run the script I get an error and it ends because there’s no exchange/o365 tenant. I get the prompts to choose Azure version and Exchange version (which I do) and all PS modules are imported and available. I never get to the prompt where it asks what licensing I have.
I considered trying to comment out portions of the code but I’m not confident.