Failing to connect to defender

[zachurrutia]

Initializing SCuBA shows all modules are up to date.
Using an account assigned with Exchange Administrator role.

Recreate Issue
When running the invoke-scuba command with the defender product, I am receiving the following errors

WARNING: Error retrieving Tenant details using Get-EXOTenantDetail The term 'Get-OrganizationConfig' is not recognized as a name of a cmdlet, function, script file, or executable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
Write-Error: Error connecting to ExchangeOnline. Cannot validate argument on parameter 'M365Environment'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command
again.
WARNING: Error running Get-AdminAuditLogConfig. The term 'Get-AdminAuditLogConfig' is not recognized as a name of a cmdlet, function, script file, or executable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
WARNING: Resulting JSON is truncated as serialization has exceeded the set depth of 2.
Exception: Fatal Error involving the Report Creation.              Ending ScubaGear execution. See the exception message for more details: Cannot validate argument on parameter 'Config'. The argument is null
or empty. Provide an argument that is not null or empty, and then try the command again.

I ran a Disconnect-SCuBATenant command and receiving the same results.

[buidav]

Hello, @zachurrutia

• What type of tenant are your running against Commercial, GCC, or GCC High?
• What PowerShell version are you running? PowerShell 5.1 or 7?
• What's the OS of the system you're running on? Windows 10, 11, Server 2019 etc?

[zachurrutia]

* Commercial tenant * Powershell Version 7.4.6 * Windows 10 Zach Urrutia IT Systems Engineer [Agilyx]<https://www.agilyx.com/> agilyx.com<https://www.agilyx.com/> | LinkedIn<https://www.linkedin.com/company/agilyx/> From: David Bui ***@***.***> Sent: Wednesday, May 7, 2025 3:33 PM To: cisagov/ScubaGear ***@***.***> Cc: Zach Urrutia ***@***.***>; Mention ***@***.***> Subject: [EXTERNAL]-Re: [cisagov/ScubaGear] Failing to connect to defender (Issue #1691) CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. You don't often get email from ***@***.*** Learn why this is important<https://url.avanan.click/v2/r01/___https://aka.ms/LearnAboutSenderIdentification___.YXAzOmFnaWx5eDphOm86ZTIyZmIzOTM1ZTdjOTg2YTA5ZTY0ZDBkMDYxM2YxYjk6NzpmMGQ3OmE3YmUzNWExNDFjMGYzMmE5YzE5MDZmNzA5NTJiOTEzMzAxM2Q0YjBlYjEwZWRjOWYzOWY1YTI3OWYzYmE4YmU6aDpUOk4> [Image removed by sender.]buidav left a comment (cisagov/ScubaGear#1691)<https://url.avanan.click/v2/r01/___https://github.com/cisagov/ScubaGear/issues/1691%23issuecomment-2859999585___.YXAzOmFnaWx5eDphOm86ZTIyZmIzOTM1ZTdjOTg2YTA5ZTY0ZDBkMDYxM2YxYjk6NzpkMWRiOjU2Yzc2MjYzZTlhMzMwNWMxZGVhOGYxNTI1NjlmNzdlOWFhZTBhMDY4YTBiYWYzMDUwOTU1Zjg2NGEyYzMzNGI6aDpUOk4> Hello, @zachurrutia<https://url.avanan.click/v2/r01/___https://github.com/zachurrutia___.YXAzOmFnaWx5eDphOm86ZTIyZmIzOTM1ZTdjOTg2YTA5ZTY0ZDBkMDYxM2YxYjk6NzoxYzdlOmI5ZTA0MTEwMzE1NmJjNTJlODZhMzM0NGEwNWI4ZTkzNjNhNGRhMTNjODgxMzlkMzc5NTEyYjc0OGFhMTAzN2U6aDpUOk4> * What type of tenant are your running against Commercial, GCC, or GCC High? * What PowerShell version are you running? PowerShell 5.1 or 7? * What's the OS of the system you're running on? Windows 10, 11, Server 2019 etc? - Reply to this email directly, view it on GitHub<https://url.avanan.click/v2/r01/___https://github.com/cisagov/ScubaGear/issues/1691%23issuecomment-2859999585___.YXAzOmFnaWx5eDphOm86ZTIyZmIzOTM1ZTdjOTg2YTA5ZTY0ZDBkMDYxM2YxYjk6NzplNzU1OjIwOTllNGNmODk2MzhmMDg3YjQ4MTc2OWJjZDcwNGVhNjg3ZGJlY2M1MTg0ZmI0N2FmNWY4MzAwOWQxODExZjk6aDpUOk4>, or unsubscribe<https://url.avanan.click/v2/r01/___https://github.com/notifications/unsubscribe-auth/BHLD34ERODMAWVAKWBTAACL25JNWPAVCNFSM6AAAAAB4UH6SXWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDQNJZHE4TSNJYGU___.YXAzOmFnaWx5eDphOm86ZTIyZmIzOTM1ZTdjOTg2YTA5ZTY0ZDBkMDYxM2YxYjk6NzplZGQ0OmI3Y2YyNzMzMTBlNjUyYzgwOWI1NjE4NjQyMDczZjlhZjdkYjAwYjBkZTQ2NGMwMTNjNzg4ZGQ4YThjOWQ4MjQ6aDpUOk4>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[buidav]

@zachurrutia ScubaGear currently only supports up to PowerShell 5.1
This is because the underlying Microsoft PowerShell modules ScubaGear uses (Exchange/Defender is one of them) still do not support PowerShell 7+ fully.
Please rerun on PowerShell 5.1 and let us know if there error persists.