Microsoft-Extractor-Suite

3.0.0

Microsoft-Extractor-Suite.psd1

@{
    RootModule = 'Microsoft-Extractor-Suite.psm1'
    
    # Author of this module
    Author = 'Joey Rentenaar & Korstiaan Stam'
    
    # Company of this module
    CompanyName = 'Invictus-IR'
    
    # Version number of this module.
    ModuleVersion = '3.0.0' 
    
    # ID used to uniquely identify this module
    GUID = '4376306b-0078-4b4d-b565-e22804e3be01'
    
    # Copyright statement for this module
    Copyright = 'Copyright 2025 Invictus Incident Response'
    
    # Description of the functionality provided by this module
    Description = 'Microsoft-Extractor-Suite is a fully-featured, actively-maintained, Powershell tool designed to streamline the process of collecting all necessary data and information from various sources within Microsoft.'    
    
    NestedModules = @(
        ".\Scripts\Get-UAL.ps1"
        ".\Scripts\Get-UALStatistics.ps1"
        ".\Scripts\Connect.ps1"
        ".\Scripts\Disconnect.ps1"
        ".\Scripts\Get-Rules.ps1"
        ".\Scripts\Get-MailboxAuditLog.ps1"
        ".\Scripts\Get-MessageTraceLog.ps1"
        ".\Scripts\Get-AzureADLogs.ps1"
        ".\Scripts\Get-OAuthPermissions.ps1"
        ".\Scripts\Get-AdminAuditLog.ps1"
        ".\Scripts\Get-AzureActivityLogs.ps1"
        ".\Scripts\Get-AzureADGraphLogs.ps1"
        ".\Scripts\Get-UsersInfo.ps1"
        ".\Scripts\Get-MFAStatus.ps1"
        ".\Scripts\Get-RiskyEvents.ps1"
        ".\Scripts\Get-ConditionalAccessPolicy.ps1"
        ".\Scripts\Get-Emails.ps1"
        ".\Scripts\Get-MailItemsAccessed.ps1"
        ".\Scripts\Get-UALGraph.ps1"
        ".\Scripts\Get-AzureDirectoryActivityLogs.ps1"
        ".\Scripts\Get-AuditLogSettings.ps1"
        ".\Scripts\Get-MailboxPermissions.ps1"
        ".\Scripts\Get-Devices.ps1"
        ".\Scripts\Get-AllEvidence.ps1"
        ".\Scripts\Get-ProductLicenses.ps1"
        ".\Scripts\Get-Groups.ps1"
    )
    
    FunctionsToExport = @(
        # Connect.ps1
        "Connect-M365"
        "Connect-Azure"
        "Connect-AzureAZ"
        
        # Disconnect.ps1
        "Disconnect-M365"
        "Disconnect-Azure"
        "Disconnect-AzureAZ"

        # Get-UAL.ps1
        "Get-UAL"
        
        # Get-UALGraph
        "Get-UALGraph"
        
        # Get-UALStatistics.ps1
        "Get-UALStatistics"
        
        # Get-Rules.ps1
        "Show-MailboxRules"
        "Get-MailboxRules"
        "Get-TransportRules"
        "Show-TransportRules"
        
        # Get-MailboxAuditLog.ps1
        "Get-MailboxAuditLog"
        
        # Get-MessageTraceLog.ps1
        "Get-MessageTraceLog"
        
        # Get-AzureADLogs
        "Get-EntraAuditLogs"
        "Get-EntraSignInLogs"
    
        # Get-OAuthPermissions.ps1
        "Get-OAuthPermissions"
    
        # Get-AdminAuditLog.ps1
        "Get-AdminAuditLog"
        
        # Get-AzureActivityLogs.ps1
        "Get-ActivityLogs"
    
        # Get-AzureDirectoryActivityLogs.ps1
        "Get-DirectoryActivityLogs"
    
        # Get-AzureADGraphLogs.ps1
        "Get-GraphEntraSignInLogs"
        "Get-GraphEntraAuditLogs"
    
        # Get-UsersInfo.ps1
        "Get-Users"
        "Get-AdminUsers"
    
        # Get-MFAStatus.ps1
        "Get-MFA"
    
        # Get-RiskyEvents.ps1
        "Get-RiskyUsers"
        "Get-RiskyDetections"
    
        # Get-ConditionalAccessPolicy.ps1
        "Get-ConditionalAccessPolicies"
    
        # Get-Emails.ps1
        "Get-Email"
        "Get-Attachment"
        "Show-Email"
    
        # Get-MailItemsAccessed.ps1
        "Get-Sessions"
        "Get-MessageIDs"
    
        # Get-AuditLogSettings.ps1
        "Get-MailboxAuditStatus"
    
        # Get-MailboxPermissions.ps1
        "Get-MailboxPermissions"
    
        # Get-Devices.ps1
        "Get-Devices"
    
        # Get-AllEvidence.ps1
        "Start-EvidenceCollection"
                
        # Get-ProductLicenses.ps1
        "Get-Licenses"
        "Get-LicenseCompatibility"
        "Get-EntraSecurityDefaults"
        "Get-LicensesByUser"

        # Get-Groups.ps1
        "Get-Groups"
        "Get-GroupMembers"
        "Get-DynamicGroups"
    )
    
    # Variables to export from this module
    VariablesToExport = @(
        '$outputdir',
        '$curDir',
        '$logFile',
        '$retryCount'
    )
    
    # Cmdlets to export from this module, for best performance
    CmdletsToExport = @()    
}