First Commit of vSphere Hardening Cmdlet for Assessing VMs
Hardening Guide is encoded into the module Available actions: Show-HardeningGuide Assess-VM Example: Assess-VM -VM (Get-VM) -RiskProfile 2 $VMs = Get-VM "MGMT*" Assess-VM -VM $VMs
This commit is contained in:
vtagion committed
1 parent
440c125076
commit
36925014a8
1 file changed
+372
@@ -0,0 +1,372 @@
|
|||||||
|
<#
|
||||||
|
.NOTES
|
||||||
|
===========================================================================
|
||||||
|
Created on: 5/27/2015 3:24 PM
|
||||||
|
Created by: Brian Graf
|
||||||
|
Twitter: @vBrianGraf
|
||||||
|
Blog: http://www.vtagion.com
|
||||||
|
===========================================================================
|
||||||
|
#>
|
||||||
|
|
||||||
|
#Encoded Hardening Guide
|
||||||
|
$Global:Base64 = "UEsDBBQABgAIAAAAIQByzFKQpAEAANcGAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACslctOwzAQRfdI/EPkLUpcWCCEmnbBYwlIlA8w9qSx6he2C+3fM3bpg6o0Qs0mTmLPvWec8WQ4XmhVfIIP0pqaXFYDUoDhVkgzrcnb5LG8IUWIzAimrIGaLCGQ8ej8bDhZOggFRptQkzZGd0tp4C1oFirrwOBMY71mER/9lDrGZ2wK9GowuKbcmggmljFpkNHwHho2V7F4WODrFcmXbkhxt1qXrGoidYpflGmGHozxoMJeEHNOSc4iZkc/jdgjK3+oKozMa0IrXbhA9D8c0sxvql2Dn7hn3E4vBRQvzMcnppGdLhT9sn72bu2sOi5ygNI2jeQgLJ9r3LUqOA9MhBYgalXlsdJMmjX3Ef+8ONA8XPYMkvLLwh0cEWsEaL6ejpBlOgyx2gzwVAKh55R3lDsYQlwq6Nt+Jdrl3DIP4jV6PNG9A+xqd3129o47QGMa+i69LNrh/zEHv5ysILb3fZNslbuKkil+1+Kp7bsk17rH/LGVvHjrAjZiD/8HWHfNFF06FAIfJWz65qH+s3HEfnlyxpB+EwLEAW+af0ujbwAAAP//AwBQSwMEFAAGAAgAAAAhAOT5JVMGAQAA3AIAAAsACAJfcmVscy8ucmVscyCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs0t1qwyAUB/D7wd5Bzn1j2o0xRpPejEHvxsge4FRPEkn0iNo1ffvJYB+BrgzWS/X496fH9Wayo3ijEA27CpZFCYKcYm1cV8Fr87S4BxETOo0jO6rgSBE29fXV+oVGTHlT7I2PIqe4WEGfkn+QMqqeLMaCPbm80nKwmPIwdNKjGrAjuSrLOxl+ZkA9yxRbXUHY6hsQzdHnk/+TLS0l1JhQKg608CHLQjL5LqLB0FGqQLN6ztPxo6LIapCnQavLglK/tzuHZjxB+VorDrb9zbP8u4fb1ih6ZLW35NKJHsh5xTdpGuWBw7BjHs69ze0lLTQlcpr0+Xah958iOfuT9TsAAAD//wMAUEsDBBQABgAIAAAAIQBQ+Z9uEwEAAMgDAAAaAAgBeGwvX3JlbHMvd29ya2Jvb2sueG1sLnJlbHMgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsk8tqwzAQRfeF/oOYfS07bUMpkbNoKWTbph8g5LFlYo+MRn347ysMiW0I7sYbwdxBdw7z2O1/20Z8o+fakYIsSUEgGVfUVCn4PL7dPYHgoKnQjSNU0CPDPr+92b1jo0P8xLbuWEQXYgU2hO5ZSjYWW82J65BipnS+1SGGvpKdNiddodyk6Vb6qQfkM09xKBT4Q3EP4th3sfL/3q4sa4Ovzny1SOFKCWkcEZoBO9pqX2FQMBGTSAvyOshmTZAQG4QjwhDK4c2WGLI1GX6cP7FFDCPHRWI5ZBZhtqtORjfmxeqaJnM5S0sdeVwTgq32WHwEH7efR5CZvATzsCpM6Jt4bJc15SE+l5ez+8v/AAAA//8DAFBLAwQUAAYACAAAACEAH5G1vY0CAAAtBQAADwAAAHhsL3dvcmtib29rLnhtbKyU32/TMBDH35H4H4zV1zY/1q5dlGRa18ImIZi2sb1UQm58baw6drCdtRPif+ecrNCxlyF4ic928rm7790lPd1VkjyAsUKrjEaDkBJQheZCrTP65fZ9f0KJdUxxJrWCjD6Cpaf52zfpVpvNUusNQYCyGS2dq5MgsEUJFbMDXYPCm5U2FXO4NevA1gYYtyWAq2QQh+FxUDGhaEdIzGsYerUSBcx00VSgXAcxIJnD8G0parunVcVrcBUzm6buF7qqEbEUUrjHFkpJVSSXa6UNW0pMexeN9mQ0X6ArURht9coNEBV0Qb7INwqDKOpSztOVkHDXyU5YXX9ilfciKZHMujkXDnhGj3Grt/DswDT1tBESb6PhMA5pkP8qxZUhHFaske4Wi7DH44ujoziO/ZuY1Jl0YBRzcK6VQw2f1P9XvVr2eamxOuQavjXCADaFly1P8cmKhC3tFXMlaYzM6GLxUG2ZgX6prVvclGhy8l5LjpIsPiuYGfEA08YKBdYuLpjhoLAlyYdGcLCL40G4OKgHe1nsv6gIK7w0AWrTxd/Zf+qUp77b7wRs7W/F/Zbs7oXieptRnJ3HA3vbHt8L7sqMxtFkjPfd2QWIdekyOhmjPt73AbqdD3TRrkS1fXHjZybCQfTrpS89JSYRaJhLHrWE/WfYAKgZ9/2EkIPdE2q+a8svZ8yxr4iRumCy5XsuRlgKjlp7F3nn9l3vrBclvfveOEqDAyCG/dwZggpsQb+0MY7iUdQGBzv30bo8xRWrLzL6PRqGZ+PwZNgP50ej/nByEvcnw6O4fz6cxfPReD6bT0c//u/AYRMm+3+WjxJbzt0aVmywra5hNWUWB7DTEuPE5PZRB/uv8p8AAAD//wMAUEsDBBQABgAIAAAAIQCpTAfKqgMAAJQUAAANAAAAeGwvc3R5bGVzLnhtbOxYbW/bNhD+PmD/gdB3RS+xPNuQ1NVxBBTIumHxgH2lJcrmwheBpFO7w/777iTZVtpsbZMMyNp8kcgj+fDu9NxRvPTVTgpyy4zlWmVedBZ6hKlSV1ytM++3ZeFPPGIdVRUVWrHM2zPrvcq//y61bi/Y9YYxRwBC2czbONfMgsCWGyapPdMNUzBSayOpg65ZB7YxjFYWF0kRxGE4DiTlyusQZrL8HBBJzc228UstG+r4igvu9i2WR2Q5e7NW2tCVAFV30YiWB+y28xG85KXRVtfuDOACXde8ZB9rOQ2mASDlaa2Vs6TUW+UyLwZo3GF2o/Q7VeAQOLCflaf2PbmlAiSRF+RpqYU2xIFnQLFWoqhk3YwLKvjKcJxWU8nFvhPHKGid2c+THExDYYB6dNo8cJ8eoX1ZQOJCDOzqBHkK/nXMqAJGSd9e7hswQAEVOkVg6JOz14buozgZLAjaDfN0pU0F1Dt4FJ3XifJUsNqBqYavN/h2uoHnSjsH3ylPK07XWlGBzjis6BtgTsmEuEZ6/l7fwd7VRG1lId2bKvOA6OjGQxMM6ZsdXtdB/CFahz2AHYPKXw5LdvUR/xGrCW0asX8t+FpJhpREBwKZui55Z2izZLtWjobs6n/WNQJv3O+Co67dbshz3Oixe+OGn3T/B3u/3coVM0WbUPoouuO90fQJQO8xDJz39PscqAVkGjD2Dl+PzCOYLDLvLVouIO307CGrLReOq3u4CpjV7sT+OAZmgGBIj402/D18AkxSa6aYQWg4CRwvUdTFmkccMLine truncated
|
||||||
|
|
||||||
|
Function Import-Xls {
|
||||||
|
|
||||||
|
<#
|
||||||
|
.SYNOPSIS
|
||||||
|
Import an Excel file.
|
||||||
|
|
||||||
|
.DESCRIPTION
|
||||||
|
Import an excel file. Since Excel files can have multiple worksheets, you can specify the worksheet you want to import. You can specify it by number (1, 2, 3) or by name (Sheet1, Sheet2, Sheet3). Imports Worksheet 1 by default.
|
||||||
|
|
||||||
|
.PARAMETER Path
|
||||||
|
Specifies the path to the Excel file to import. You can also pipe a path to Import-Xls.
|
||||||
|
|
||||||
|
.PARAMETER Worksheet
|
||||||
|
Specifies the worksheet to import in the Excel file. You can specify it by name or by number. The default is 1.
|
||||||
|
Note: Charts don't count as worksheets, so they don't affect the Worksheet numbers.
|
||||||
|
|
||||||
|
.INPUTS
|
||||||
|
System.String
|
||||||
|
|
||||||
|
.OUTPUTS
|
||||||
|
Object
|
||||||
|
|
||||||
|
.EXAMPLE
|
||||||
|
".\employees.xlsx" | Import-Xls -Worksheet 1
|
||||||
|
Import Worksheet 1 from employees.xlsx
|
||||||
|
|
||||||
|
.EXAMPLE
|
||||||
|
".\employees.xlsx" | Import-Xls -Worksheet "Sheet2"
|
||||||
|
Import Worksheet "Sheet2" from employees.xlsx
|
||||||
|
|
||||||
|
.EXAMPLE
|
||||||
|
".\deptA.xslx", ".\deptB.xlsx" | Import-Xls -Worksheet 3
|
||||||
|
Import Worksheet 3 from deptA.xlsx and deptB.xlsx.
|
||||||
|
Make sure that the worksheets have the same headers, or have some headers in common, or that it works the way you expect.
|
||||||
|
|
||||||
|
.EXAMPLE
|
||||||
|
Get-ChildItem *.xlsx | Import-Xls -Worksheet "Employees"
|
||||||
|
Import Worksheet "Employees" from all .xlsx files in the current directory.
|
||||||
|
Make sure that the worksheets have the same headers, or have some headers in common, or that it works the way you expect.
|
||||||
|
|
||||||
|
.LINK
|
||||||
|
Import-Xls
|
||||||
|
http://gallery.technet.microsoft.com/scriptcenter/17bcabe7-322a-43d3-9a27-f3f96618c74b
|
||||||
|
Export-Xls
|
||||||
|
http://gallery.technet.microsoft.com/scriptcenter/d41565f1-37ef-43cb-9462-a08cd5a610e2
|
||||||
|
Import-Csv
|
||||||
|
Export-Csv
|
||||||
|
|
||||||
|
.NOTES
|
||||||
|
Author: Francis de la Cerna
|
||||||
|
Created: 2011-03-27
|
||||||
|
Modified: 2011-04-09
|
||||||
|
#Requires –Version 2.0
|
||||||
|
|
||||||
|
#>
|
||||||
|
|
||||||
|
[CmdletBinding(SupportsShouldProcess = $true)]
|
||||||
|
Param (
|
||||||
|
[parameter(
|
||||||
|
mandatory = $true,
|
||||||
|
position = 1,
|
||||||
|
ValueFromPipeline = $true,
|
||||||
|
ValueFromPipelineByPropertyName = $true)]
|
||||||
|
[String[]]$Path,
|
||||||
|
[parameter(mandatory = $false)]
|
||||||
|
$Worksheet = 1,
|
||||||
|
[parameter(mandatory = $false)]
|
||||||
|
[switch]$Force
|
||||||
|
)
|
||||||
|
|
||||||
|
Begin {
|
||||||
|
function GetTempFileName($extension) {
|
||||||
|
$temp = [io.path]::GetTempFileName();
|
||||||
|
$params = @{
|
||||||
|
Path = $temp;
|
||||||
|
Destination = $temp + $extension;
|
||||||
|
Confirm = $false;
|
||||||
|
Verbose = $VerbosePreference;
|
||||||
|
}
|
||||||
|
Move-Item @params;
|
||||||
|
$temp += $extension;
|
||||||
|
return $temp;
|
||||||
|
}
|
||||||
|
|
||||||
|
# since an extension like .xls can have multiple formats, this
|
||||||
|
# will need to be changed
|
||||||
|
#
|
||||||
|
$xlFileFormats = @{
|
||||||
|
# single worksheet formats
|
||||||
|
'.csv' = 6; # 6, 22, 23, 24
|
||||||
|
'.dbf' = 11; # 7, 8, 11
|
||||||
|
'.dif' = 9; #
|
||||||
|
'.prn' = 36; #
|
||||||
|
'.slk' = 2; # 2, 10
|
||||||
|
'.wk1' = 31; # 5, 30, 31
|
||||||
|
'.wk3' = 32; # 15, 32
|
||||||
|
'.wk4' = 38; #
|
||||||
|
'.wks' = 4; #
|
||||||
|
'.xlw' = 35; #
|
||||||
|
|
||||||
|
# multiple worksheet formats
|
||||||
|
'.xls' = -4143; # -4143, 1, 16, 18, 29, 33, 39, 43
|
||||||
|
'.xlsb' = 50; #
|
||||||
|
'.xlsm' = 52; #
|
||||||
|
'.xlsx' = 51; #
|
||||||
|
'.xml' = 46; #
|
||||||
|
'.ods' = 60; #
|
||||||
|
}
|
||||||
|
|
||||||
|
$xl = New-Object -ComObject Excel.Application;
|
||||||
|
$xl.DisplayAlerts = $false;
|
||||||
|
$xl.Visible = $false;
|
||||||
|
}
|
||||||
|
|
||||||
|
Process {
|
||||||
|
$Path | ForEach-Object {
|
||||||
|
|
||||||
|
if ($Force -or $psCmdlet.ShouldProcess($_)) {
|
||||||
|
|
||||||
|
$fileExist = Test-Path $_
|
||||||
|
|
||||||
|
if (-not $fileExist) {
|
||||||
|
Write-Error "Error: $_ does not exist" -Category ResourceUnavailable;
|
||||||
|
} else {
|
||||||
|
# create temporary .csv file from excel file and import .csv
|
||||||
|
#
|
||||||
|
$_ = (Resolve-Path $_).toString();
|
||||||
|
$wb = $xl.Workbooks.Add($_);
|
||||||
|
if ($?) {
|
||||||
|
$csvTemp = GetTempFileName(".csv");
|
||||||
|
$ws = $wb.Worksheets.Item($Worksheet);
|
||||||
|
$ws.SaveAs($csvTemp, $xlFileFormats[".csv"]);
|
||||||
|
$wb.Close($false);
|
||||||
|
Remove-Variable -Name ('ws', 'wb') -Confirm:$false;
|
||||||
|
Import-Csv $csvTemp;
|
||||||
|
Remove-Item $csvTemp -Confirm:$false -Verbose:$VerbosePreference;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
End {
|
||||||
|
$xl.Quit();
|
||||||
|
Remove-Variable -name xl -Confirm:$false;
|
||||||
|
[gc]::Collect();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
Function Show-HardeningGuide {
|
||||||
|
$Global:XLS = Import-XLS $env:temp\HG.XLSX
|
||||||
|
$ShowGuide = $XLS | Out-GridView
|
||||||
|
}
|
||||||
|
Function Assess-VM {
|
||||||
|
<#
|
||||||
|
.DESCRIPTION
|
||||||
|
This cmdlet will allow you to assess the security of the VM's in your environment
|
||||||
|
.EXAMPLE
|
||||||
|
# Specify Virtual Machines to Assess
|
||||||
|
$VM = Get-VM MGMT-AD, MGMT-VCO, WebCommander, Exchange01
|
||||||
|
|
||||||
|
# Assess against Risk Profile 2
|
||||||
|
Assess-VM -VM $VM -RiskProfile 2
|
||||||
|
|
||||||
|
.EXAMPLE
|
||||||
|
# Assess all VM's against specific ID's
|
||||||
|
$VM = Get-VM
|
||||||
|
Assess-VM -VM $VM -ID 9,10,12,22,33,49
|
||||||
|
|
||||||
|
.EXAMPLE
|
||||||
|
# Assess All VM's against All ID's
|
||||||
|
Assess-VM -VM (Get-VM)
|
||||||
|
#>
|
||||||
|
[CmdletBinding(
|
||||||
|
DefaultParameterSetName = ”ID”
|
||||||
|
)]
|
||||||
|
Param (
|
||||||
|
#Object receiving the hardening
|
||||||
|
[Parameter(
|
||||||
|
Position = 0,
|
||||||
|
ValueFromPipeline = $true,
|
||||||
|
ValueFromPipelineByPropertyName = $true,
|
||||||
|
HelpMessage = 'What object are you running this against?')]
|
||||||
|
#[string]$VMs,
|
||||||
|
[PSObject[]]
|
||||||
|
$VM,
|
||||||
|
|
||||||
|
#Hardening Guide Profile
|
||||||
|
[Parameter(Mandatory = $false,
|
||||||
|
ValueFromPipeline = $false,
|
||||||
|
HelpMessage = "You must choose which Hardening Guide Risk Profile to use (1-3).",
|
||||||
|
ParameterSetName = 'RiskProfile')]
|
||||||
|
#[ValidateRange(1,3)]
|
||||||
|
[int]$RiskProfile,
|
||||||
|
|
||||||
|
#Hardening Guide Guideline ID
|
||||||
|
[Parameter(Mandatory = $false,
|
||||||
|
ValueFromPipeline = $false,
|
||||||
|
ParameterSetName = 'ID')]
|
||||||
|
[string[]]$ID,
|
||||||
|
|
||||||
|
[parameter(ParameterSetName = "ID",
|
||||||
|
ValueFromPipeline = $false)]
|
||||||
|
$AllIDs = "1"
|
||||||
|
)
|
||||||
|
|
||||||
|
BEGIN {
|
||||||
|
# Validate VM Parameter
|
||||||
|
# This ensures the object being passed is an object rather than a string
|
||||||
|
[int]$Err = 0
|
||||||
|
foreach ($object in $vm) { if (($object.GetType().FullName) -ne "VMware.VimAutomation.ViCore.Impl.V1.Inventory.VirtualMachineImpl") { $Err += 1 } }
|
||||||
|
if ($Err -gt 0) {
|
||||||
|
Write-Error "One or more objects specified in the `$VM parameter is not a VM object"
|
||||||
|
Break
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
# Get the Date, used for folder creation and report
|
||||||
|
$Date = (Get-Date -Format MM.dd.yy)
|
||||||
|
|
||||||
|
# Create array of ID's
|
||||||
|
if (-not $ID) {
|
||||||
|
$IDs = $null
|
||||||
|
} else {
|
||||||
|
$IDs = $ID.Replace(' ', '').split(',')
|
||||||
|
}
|
||||||
|
|
||||||
|
# Manage Risk Profile Parameter value
|
||||||
|
$RiskArray = @("1","2","3")
|
||||||
|
|
||||||
|
|
||||||
|
### HTML CSS CODE ###
|
||||||
|
$head = @'
|
||||||
|
<style>
|
||||||
|
BODY{font-family:Arial; background-color:#494a4d;}
|
||||||
|
TABLE{border-width: 1px;border-style: solid;border-color: black;border-collapse: collapse; width: 95.3%}
|
||||||
|
TH{color:#006990; font-size:1.3em; border-width: 1px;padding: 2px;border-style: solid;border-color: black;background-color:#bdbdbd}
|
||||||
|
TD{color:#006990; border-width: 1px;padding: 2px;border-style: solid;border-color: black;background-color:white}
|
||||||
|
h1 {color: #FFFFFF;}
|
||||||
|
h2 {BORDER-RIGHT: #bbbbbb 1px solid;PADDING-RIGHT: 0px;BORDER-TOP: #bbbbbb 1px solid;DISPLAY: block;PADDING-LEFT: 0px;FONT-WEIGHT: bold;FONT-SIZE: 16pt;MARGIN-BOTTOM: -1px;MARGIN-LEFT: AUTO;BORDER-LEFT: #bbbbbb 1px solid;COLOR: #FFFFFF;MARGIN-RIGHT: AUTO;PADDING-TOP: 4px;BORDER-BOTTOM: #bbbbbb 1px solid;FONT-FAMILY: Tahoma;POSITION: relative;HEIGHT: 1.5em;WIDTH: 95%;TEXT-INDENT: 10px;BACKGROUND-COLOR: #387C2C;}
|
||||||
|
h3 {BORDER-RIGHT: #bbbbbb 1px solid;PADDING-RIGHT: 0px;BORDER-TOP: #bbbbbb 1px solid;DISPLAY: block;PADDING-LEFT: 0px;FONT-WEIGHT: bold;FONT-SIZE: 12pt;MARGIN-BOTTOM: -1px;MARGIN-TOP: -1px;MARGIN-LEFT: AUTO;BORDER-LEFT: #bbbbbb 1px solid;COLOR: #FFFFFF;MARGIN-RIGHT: AUTO;PADDING-TOP: 4px;BORDER-BOTTOM: #bbbbbb 1px solid;FONT-FAMILY: Tahoma;POSITION: relative;HEIGHT: 1.5em;WIDTH: 95%;TEXT-INDENT: 10px;BACKGROUND-COLOR: #6DB33F;}
|
||||||
|
h4 {color: #00FFFF; margin-bottom: 0cm; margin-top: 0cm;}
|
||||||
|
br { line-height: 25%;}
|
||||||
|
</style>
|
||||||
|
'@
|
||||||
|
#####################
|
||||||
|
|
||||||
|
#C heck to see if HG exists in the $Env:Temp folder, if not, place it there
|
||||||
|
if (!(Test-Path -Path "$env:Temp\HG.XLSX")) {
|
||||||
|
|
||||||
|
# Decode Hardening Guide from script
|
||||||
|
$Content = [System.Convert]::FromBase64String($Global:Base64)
|
||||||
|
Set-Content -Path $env:temp\HG.XLSX -Value $Content -Encoding Byte
|
||||||
|
}
|
||||||
|
|
||||||
|
#Save Imported Hardening Guide to $XLS
|
||||||
|
$Global:XLS = Import-XLS $env:temp\HG.XLSX
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
PROCESS {
|
||||||
|
|
||||||
|
# If risk profile is provided
|
||||||
|
if ($RiskArray -contains $RiskProfile) {
|
||||||
|
|
||||||
|
$Guidelines = ($XLS | ?{ $_."Guideline ID" -like "VM*" -and $_."Risk Profile" -match $RiskProfile })
|
||||||
|
foreach ($Guideline in $Guidelines) {
|
||||||
|
|
||||||
|
$ID = $Guideline.ID
|
||||||
|
$GuidelineID = $Guideline."Guideline ID"
|
||||||
|
$Name = ($GuidelineID.Split("."))[1]
|
||||||
|
$Assessment = $Guideline."PowerCLI Command Assessment"
|
||||||
|
$Assessment = $Assessment -replace "Get-VM", "`$VM"
|
||||||
|
$Description = $Guideline."Description"
|
||||||
|
|
||||||
|
Write-Host "Processing: $ID - $Name" -ForegroundColor CYAN
|
||||||
|
if ($assessment -ne "") {
|
||||||
|
$run = iex ($Assessment)
|
||||||
|
if ($run -eq $null) {
|
||||||
|
$run = New-Object System.object
|
||||||
|
$run | Add-Member -type NoteProperty -name Name -value "Clear"
|
||||||
|
$run | Add-Member -type NoteProperty -name Description -value "NO SECURITY HARDENING NEEDED FOR THIS GUIDELINE"
|
||||||
|
}
|
||||||
|
$Task = $run | ConvertTo-Html -Fragment -PreContent "<Center><h2>$ID - $Name</h2><h3>$Description</h3></Center>" -PostContent "<br>" | Out-String
|
||||||
|
$Tasks += $task
|
||||||
|
}
|
||||||
|
}
|
||||||
|
} elseif ($AllIDs -eq "1" -and $ID -eq $null) {
|
||||||
|
|
||||||
|
$Guidelines = ($XLS | ?{ $_."Guideline ID" -like "VM*" })
|
||||||
|
foreach ($Guideline in $Guidelines) {
|
||||||
|
$ID = $Guideline.ID
|
||||||
|
$GuidelineID = $Guideline."Guideline ID"
|
||||||
|
$Name = ($GuidelineID.Split("."))[1]
|
||||||
|
$Assessment = $Guideline."PowerCLI Command Assessment"
|
||||||
|
$Assessment = $Assessment -replace "Get-VM", "`$VM"
|
||||||
|
$Description = $Guideline."Description"
|
||||||
|
Write-Host "Processing: $ID - $Name" -ForegroundColor CYAN
|
||||||
|
if ($assessment -ne "") {
|
||||||
|
$run = iex ($Assessment)
|
||||||
|
if ($run -eq $null) {
|
||||||
|
$run = New-Object System.object
|
||||||
|
$run | Add-Member -type NoteProperty -name Name -value "Clear"
|
||||||
|
$run | Add-Member -type NoteProperty -name Description -value "NO SECURITY HARDENING NEEDED FOR THIS GUIDELINE"
|
||||||
|
}
|
||||||
|
$Task = $run | ConvertTo-Html -Fragment -PreContent "<Center><h2>$ID - $Name</h2><br><h3>$Description</h3></Center>" | Out-String
|
||||||
|
$Tasks += $task
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
} else {
|
||||||
|
# If Guideline IDs are provided
|
||||||
|
foreach ($line in $ID) {
|
||||||
|
$Guideline = ($XLS | ?{ $_."Guideline ID" -like "VM*" -and $_."ID" -eq $Line })
|
||||||
|
$GuidelineID = $Guideline."Guideline ID"
|
||||||
|
if ($GuidelineID -eq $null) {
|
||||||
|
Write-Host "$line is an invalid ID for this object... moving to next ID" -ForegroundColor 'Red'
|
||||||
|
Continue
|
||||||
|
}
|
||||||
|
$Name = ($GuidelineID.Split("."))[1]
|
||||||
|
|
||||||
|
$Description = $Guideline."Description"
|
||||||
|
$Assessment = $Guideline."PowerCLI Command Assessment"
|
||||||
|
$Assessment = $Assessment -replace "Get-VM", "`$VM"
|
||||||
|
Write-Host "Processing: $line - $Name" -ForegroundColor CYAN
|
||||||
|
if ($assessment -ne "") {
|
||||||
|
$run = iex ($Assessment)
|
||||||
|
if ($run -eq $null) {
|
||||||
|
$run = New-Object System.object
|
||||||
|
$run| Add-Member -type NoteProperty -name Name -value "Clear"
|
||||||
|
$run | Add-Member -type NoteProperty -name Description -value "NO SECURITY HARDENING NEEDED FOR THIS GUIDELINE"
|
||||||
|
}
|
||||||
|
$Task = $run | ConvertTo-Html -Fragment -PreContent "<Center><h2>$line - $Name</h2><br><h3>$Description</h3></Center>" -PostContent "<br>" | Out-String
|
||||||
|
$Tasks += $task
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
END {
|
||||||
|
# if no tasks were generated, end function and do NOT create empty report
|
||||||
|
if ($tasks -eq $null) {Break }
|
||||||
|
|
||||||
|
# Get's end time Hours/Minutes for creating the HTML report
|
||||||
|
$time = (get-date -Format HH-mm)
|
||||||
|
|
||||||
|
# Checks to see if a folder has been created for that date. If not, it will create one.
|
||||||
|
if (!(Test-Path c:\Temp\$Date)) {
|
||||||
|
Write-Host "Folder does not exist... Creating" -ForegroundColor 'Yellow'
|
||||||
|
New-item "C:\Temp\$date" -type Directory
|
||||||
|
}
|
||||||
|
|
||||||
|
# HTML Report is then generated
|
||||||
|
$HTML = ConvertTo-HTML -head $head -PostContent "<Center>$Tasks</Center>" -PreContent “<Center><h1>vSphere 6 VM Hardening Report</h1></Center>” | Out-File "c:\Temp\$Date\$Time-VMAssessment.html" -Force
|
||||||
|
|
||||||
|
# Report is opened for user to see
|
||||||
|
invoke-item "c:\Temp\$Date\$Time-VMAssessment.html"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
Reference in new issue
Block a user