-
-
Notifications
You must be signed in to change notification settings - Fork 68
/
Microsoft-Extractor-Suite.psd1
128 lines (100 loc) · 2.7 KB
/
Microsoft-Extractor-Suite.psd1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
@{
RootModule = 'Microsoft-Extractor-Suite.psm1'
# Author of this module
Author = 'Joey Rentenaar & Korstiaan Stam'
# Company of this module
CompanyName = 'Invictus-IR'
# Version number of this module.
ModuleVersion = '2.1.1'
# ID used to uniquely identify this module
GUID = '4376306b-0078-4b4d-b565-e22804e3be01'
# Copyright statement for this module
Copyright = 'Copyright 2024 Invictus Incident Response'
# Description of the functionality provided by this module
Description = 'Microsoft-Extractor-Suite is a fully-featured, actively-maintained, Powershell tool designed to streamline the process of collecting all necessary data and information from various sources within Microsoft.'
NestedModules = @(
".\Scripts\Get-UAL.ps1"
".\Scripts\Get-UALStatistics.ps1"
".\Scripts\Connect.ps1"
".\Scripts\Get-Rules.ps1"
".\Scripts\Get-MailboxAuditLog.ps1"
".\Scripts\Get-MessageTraceLog.ps1"
".\Scripts\Get-AzureADLogs.ps1"
".\Scripts\Get-OAuthPermissions.ps1"
".\Scripts\Get-AdminAuditLog.ps1"
".\Scripts\Get-AzureActivityLogs.ps1"
".\Scripts\Get-AzureADGraphLogs.ps1"
".\Scripts\Get-UsersInfo.ps1"
".\Scripts\Get-MFAStatus.ps1"
".\Scripts\Get-RiskyEvents.ps1"
".\Scripts\Get-ConditionalAccessPolicy.ps1"
".\Scripts\Get-Emails.ps1"
".\Scripts\Get-MailItemsAccessed.ps1"
".\Scripts\Get-UALGraph.ps1"
".\Scripts\Get-AzureDirectoryActivityLogs.ps1"
)
FunctionsToExport = @(
# Connect.ps1
"Connect-M365"
"Connect-Azure"
"Connect-AzureAZ"
# Get-UAL.ps1
"Get-UALAll"
"Get-UALGroup"
"Get-UALSpecific"
"Get-UALSpecificActivity"
# Get-UALGraph
"Get-UALGraph"
# Get-UALStatistics.ps1
"Get-UALStatistics"
# Get-Rules.ps1
"Show-MailboxRules"
"Get-MailboxRules"
"Get-TransportRules"
"Show-TransportRules"
# Get-MailboxAuditLog.ps1
"Get-MailboxAuditLog"
# Get-MessageTraceLog.ps1
"Get-MessageTraceLog"
# Get-AzureADLogs
"Get-ADAuditLogs"
"Get-ADSignInLogs"
# Get-OAuthPermissions.ps1
"Get-OAuthPermissions"
# Get-AdminAuditLog.ps1
"Get-AdminAuditLog"
# Get-AzureActivityLogs.ps1
"Get-ActivityLogs"
# Get-AzureDirectoryActivityLogs.ps1
"Get-DirectoryActivityLogs"
# Get-AzureADGraphLogs.ps1
"Get-ADSignInLogsGraph"
"Get-ADAuditLogsGraph"
# Get-Users.ps1
"Get-Users"
"Get-AdminUsers"
# Get-MFAStatus.ps1
"Get-MFA"
# Get-RiskyEvents.ps1
"Get-RiskyUsers"
"Get-RiskyDetections"
# Get-ConditionalAccessPolicy.ps1
"Get-ConditionalAccessPolicies"
# Get-Emails.ps1
"Get-Email"
"Get-Attachment"
"Show-Email"
# Get-MailItemsAccessed.ps1
"Get-Sessions"
"Get-MessageIDs"
)
# Variables to export from this module
VariablesToExport = @(
'$outputdir',
'$curDir',
'$logFile',
'$retryCount'
)
# Cmdlets to export from this module, for best performance
CmdletsToExport = @()
}