fix minor bug when logging LogIngestion. Minor version bump

EmilienCourt · EmilienCourt · commit 5afefd8653a7 · 2025-03-10T17:03:56.000+01:00
diff --git a/DFIR-O365RC/DFIR-O365RC.psd1 b/DFIR-O365RC/DFIR-O365RC.psd1
@@ -7,7 +7,7 @@
     RootModule = '.\DFIR-O365RC.psm1'
 
     # Version number of this module.
-    ModuleVersion = '2.0.6'
+    ModuleVersion = '2.0.7'
 
     # Supported PSEditions
     CompatiblePSEditions = 'Core', 'Desktop'
diff --git a/DFIR-O365RC/Get-O365.ps1 b/DFIR-O365RC/Get-O365.ps1
@@ -324,7 +324,7 @@ function Get-O365 {
         if (-not $isIngestionEnabled){
             Write-Error "Log ingestion is not enabled. This means that the unified audit log is disabled. This is not the default setting, please check https://learn.microsoft.com/en-us/purview/audit-log-enable-disable for more information"
             "Log ingestion is not enabled. This means that the unified audit log is disabled. This is not the default setting, please check https://learn.microsoft.com/en-us/purview/audit-log-enable-disable for more information" | Write-Log -LogPath $logFile -LogLevel "Error"
-            $adminAuditLogConfig | Write-Log -LogPath $logFile -LogLevel "Error"
+            $adminAuditLogConfig | ConvertTo-Json -Depth 99 | Write-Log -LogPath $logFile -LogLevel "Error"
         }
         else {
             $unifiedAuditLogFirstOptInDate = $adminAuditLogConfig.UnifiedAuditLogFirstOptInDate.ToString()

Original file line number	Diff line number	Diff line change
`@@ -324,7 +324,7 @@ function Get-O365 {`
`324`	`324`	`if (-not $isIngestionEnabled){`
`325`	`325`	`Write-Error "Log ingestion is not enabled. This means that the unified audit log is disabled. This is not the default setting, please check https://learn.microsoft.com/en-us/purview/audit-log-enable-disable for more information"`
`326`	`326`	`"Log ingestion is not enabled. This means that the unified audit log is disabled. This is not the default setting, please check https://learn.microsoft.com/en-us/purview/audit-log-enable-disable for more information" \| Write-Log -LogPath $logFile -LogLevel "Error"`
`327`		`- $adminAuditLogConfig \| Write-Log -LogPath $logFile -LogLevel "Error"`
	`327`	`+ $adminAuditLogConfig \| ConvertTo-Json -Depth 99 \| Write-Log -LogPath $logFile -LogLevel "Error"`
`328`	`328`	`}`
`329`	`329`	`else {`
`330`	`330`	`$unifiedAuditLogFirstOptInDate = $adminAuditLogConfig.UnifiedAuditLogFirstOptInDate.ToString()`