SharePoint
Due to the "complex" way how SharePoint itself is structured, a quick summary will first be given here. This will allow you to better understand how to obtain files from "SharePoint" in GraphSpy, and why it is separated into three modules.
An organization's SharePoint usually consists of several SharePoint Sites. These Sites basically are the overarching containers to which other resources are linked (such as pages, lists, drives, ...). A SharePoint Team Site is commonly created to allow users of a team to share information within their team, and/or with other teams.
Documents can not be directly attached to a SharePoint site, so it is not directly possible for GraphSpy to list all files of a SharePoint Site. Instead, one or multiple Drives can be created on a SharePoint site, on which files and folders can then be added.
Because of this, the SharePoint functionality in GraphSpy consists of the following three modules:
-
SharePoint Sites
- Allows to list all Sites accessible for the current user
-
SharePoint Drives
- Allows to list all accessible Drives on a specific SharePoint Site
-
SharePoint Files
- Allows to browse through the files of a specific Drive
- Access Token Resource:
https://graph.microsoft.com - Required Scope:
Sites.Read.AllorSites.ReadWrite.All
Listing the available SharePoint sites will usually be the first thing you will want to do when you want to browse files on SharePoint. The Site Filter can be used if you are searching for any specific SharePoint site (e.g. IT, Security, HR, ...).
To list all drives linked to a specific SharePoint site, you can click on the link icon in the table. This will automatically open the SharePoint Drives page in a new tab, prepopulated with the ID of that specific site.
- Access Token Resource:
https://graph.microsoft.com - Required Scope:
Files.Read,Files.ReadWrite,Files.Read.All,Files.ReadWrite.All,Sites.Read.AllorSites.ReadWrite.All
This page allows you to list all drives linked to a SharePoint site. For that, you need to know the Site ID of the SharePoint site you want to target. The easiest method of finding these Site IDs is by using the SharePoint Sites page, although you are free to enter a Site ID manually if you enumerated that through some other means.
To view the files and folders inside of a Drive, simply click the link icon in the table, which will open the SharePoint Files page in a new tab and show its content.
- Access Token Resource:
https://graph.microsoft.com - Required Scope:
Files.Read,Files.ReadWrite,Files.Read.All,Files.ReadWrite.All,Sites.Read.AllorSites.ReadWrite.All
