Microsoft-Extractor-Suite.psd1

@{
RootModule = 'Microsoft-Extractor-Suite.psm1'

# Author of this module
Author = 'Joey Rentenaar & Korstiaan Stam'

# Company of this module
CompanyName = 'Invictus-IR'

# Version number of this module.
ModuleVersion = '2.1.0' 

# ID used to uniquely identify this module
GUID = '4376306b-0078-4b4d-b565-e22804e3be01'

# Copyright statement for this module
Copyright = 'Copyright 2024 Invictus Incident Response'

# Description of the functionality provided by this module
Description = 'Microsoft-Extractor-Suite is a fully-featured, actively-maintained, Powershell tool designed to streamline the process of collecting all necessary data and information from various sources within Microsoft.'    

NestedModules = @(
    ".\Scripts\Get-UAL.ps1"
    ".\Scripts\Get-UALStatistics.ps1"
    ".\Scripts\Connect.ps1"
    ".\Scripts\Get-Rules.ps1"
    ".\Scripts\Get-MailboxAuditLog.ps1"
    ".\Scripts\Get-MessageTraceLog.ps1"
    ".\Scripts\Get-AzureADLogs.ps1"
    ".\Scripts\Get-OAuthPermissions.ps1"
    ".\Scripts\Get-AdminAuditLog.ps1"
    ".\Scripts\Get-AzureActivityLogs.ps1"
    ".\Scripts\Get-AzureADGraphLogs.ps1"
    ".\Scripts\Get-UsersInfo.ps1"
    ".\Scripts\Get-MFAStatus.ps1"
    ".\Scripts\Get-RiskyEvents.ps1"
    ".\Scripts\Get-ConditionalAccessPolicy.ps1"
    ".\Scripts\Get-Emails.ps1"
    ".\Scripts\Get-MailItemsAccessed.ps1"
    ".\Scripts\Get-UALGraph.ps1"
    ".\Scripts\Get-AzureDirectoryActivityLogs.ps1"
)

FunctionsToExport = @(
    # Connect.ps1
    "Connect-M365"
    "Connect-Azure"
    "Connect-AzureAZ"
    
    # Get-UAL.ps1
    "Get-UALAll"
    "Get-UALGroup"
    "Get-UALSpecific"
    "Get-UALSpecificActivity"
    
    # Get-UALGraph
    "Get-UALGraph"
    
    # Get-UALStatistics.ps1
    "Get-UALStatistics"
    
    # Get-Rules.ps1
    "Show-MailboxRules"
    "Get-MailboxRules"
    "Get-TransportRules"
    "Show-TransportRules"
    
    # Get-MailboxAuditLog.ps1
    "Get-MailboxAuditLog"
    
    # Get-MessageTraceLog.ps1
    "Get-MessageTraceLog"
    
    # Get-AzureADLogs
    "Get-ADAuditLogs"
    "Get-ADSignInLogs"

    # Get-OAuthPermissions.ps1
    "Get-OAuthPermissions"

    # Get-AdminAuditLog.ps1
    "Get-AdminAuditLog"
    
    # Get-AzureActivityLogs.ps1
    "Get-ActivityLogs"

    # Get-AzureDirectoryActivityLogs.ps1
    "Get-DirectoryActivityLogs"

    # Get-AzureADGraphLogs.ps1
    "Get-ADSignInLogsGraph"
    "Get-ADAuditLogsGraph"

    # Get-Users.ps1
    "Get-Users"
    "Get-AdminUsers"

    # Get-MFAStatus.ps1
    "Get-MFA"

    # Get-RiskyEvents.ps1
    "Get-RiskyUsers"
    "Get-RiskyDetections"

    # Get-ConditionalAccessPolicy.ps1
    "Get-ConditionalAccessPolicies"

    # Get-Emails.ps1
    "Get-Email"
    "Get-Attachment"
    "Show-Email"

    # Get-MailItemsAccessed.ps1
    "Get-Sessions"
    "Get-MessageIDs"
)

# Variables to export from this module
VariablesToExport = @(
    '$outputdir',
    '$curDir',
    '$logFile',
    '$retryCount'
)

# Cmdlets to export from this module, for best performance
CmdletsToExport = @()    
}