Untangling Microsoft Graph's $batch requests in Burp

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

tl;dr: Requests to Microsoft Graph’s $batch endpoint bundle several API calls into one JSON object. This makes analyzing Azure Portal traffic difficult, since underlying API calls for requests to the $batch endpoint are not individually logged. This post shares the graph_batch_parser.py Burp Suite extension as a way to speed up analysis of $batch requests. The extension processes $batch re...

Read on /posts/untangling-microsoft-batch/ ↗