WDACConfig

0.2.8-Beta2

Core/Remove-CommonWDACConfig.psm1

                                Function Remove-CommonWDACConfig {

    [CmdletBinding()]

    Param(

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$CertCN,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$CertPath,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$SignToolPath,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$UnsignedPolicyPath,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$SignedPolicyPath,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$StrictKernelPolicyGUID,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$StrictKernelNoFlightRootsPolicyGUID,

        [parameter(Mandatory = $false, DontShow = $true)][System.Management.Automation.SwitchParameter]$LastUpdateCheck

    )

    begin {

        # Importing the $PSDefaultParameterValues to the current session, prior to everything else

        . "$ModuleRootPath\CoreExt\PSDefaultParameterValues.ps1"

        # Create User configuration folder if it doesn't already exist

        if (-NOT (Test-Path -Path "$UserAccountDirectoryPath\.WDACConfig\")) {

            New-Item -ItemType Directory -Path "$UserAccountDirectoryPath\.WDACConfig\" -Force -ErrorAction Stop | Out-Null

            Write-Verbose -Message 'The .WDACConfig folder in the current user folder has been created because it did not exist.'

        }

        # Create User configuration file if it doesn't already exist

        if (-NOT (Test-Path -Path "$UserAccountDirectoryPath\.WDACConfig\UserConfigurations.json")) {

            New-Item -ItemType File -Path "$UserAccountDirectoryPath\.WDACConfig\" -Name 'UserConfigurations.json' -Force -ErrorAction Stop | Out-Null

            Write-Verbose -Message 'The UserConfigurations.json file in \.WDACConfig\ folder has been created because it did not exist.'

        }

        # Delete the entire User Configs if a more specific parameter wasn't used

        # This method is better than $PSBoundParameters since it also contains common parameters

        if (!$CertCN -And !$CertPath -And !$SignToolPath -And !$UnsignedPolicyPath -And !$SignedPolicyPath -And !$StrictKernelPolicyGUID -And !$StrictKernelNoFlightRootsPolicyGUID -And !$LastUpdateCheck) {

            Remove-Item -Path "$UserAccountDirectoryPath\.WDACConfig\" -Recurse -Force

            Write-Verbose -Message 'User Configurations for WDACConfig module have been deleted.'

            # set a boolean value that returns from the Process and End blocks as well

            [System.Boolean]$ReturnAndDone = $true

            Return

        }

        # Read the current user configurations

        [System.Object[]]$CurrentUserConfigurations = Get-Content -Path "$UserAccountDirectoryPath\.WDACConfig\UserConfigurations.json"

        # If the file exists but is corrupted and has bad values, rewrite it

        try {

            $CurrentUserConfigurations = $CurrentUserConfigurations | ConvertFrom-Json

        }

        catch {

            Set-Content -Path "$UserAccountDirectoryPath\.WDACConfig\UserConfigurations.json" -Value ''

        }

        # An object to hold the User configurations

        $UserConfigurationsObject = [PSCustomObject]@{

            SignedPolicyPath                    = ''

            UnsignedPolicyPath                  = ''

            SignToolCustomPath                  = ''

            CertificateCommonName               = ''

            CertificatePath                     = ''

            StrictKernelPolicyGUID              = ''

            StrictKernelNoFlightRootsPolicyGUID = ''

            LastUpdateCheck                     = ''

        }

    }

    process {

        if ($true -eq $ReturnAndDone) { return }

        if ($SignedPolicyPath) {

            Write-Verbose -Message 'Removing the SignedPolicyPath'

            $UserConfigurationsObject.SignedPolicyPath = ''

        }

        else {

            $UserConfigurationsObject.SignedPolicyPath = $CurrentUserConfigurations.SignedPolicyPath

        }

        if ($UnsignedPolicyPath) {

            Write-Verbose -Message 'Removing the UnsignedPolicyPath'

            $UserConfigurationsObject.UnsignedPolicyPath = ''

        }

        else {

            $UserConfigurationsObject.UnsignedPolicyPath = $CurrentUserConfigurations.UnsignedPolicyPath

        }

        if ($SignToolPath) {

            Write-Verbose -Message 'Removing the SignToolPath'

            $UserConfigurationsObject.SignToolCustomPath = ''

        }

        else {

            $UserConfigurationsObject.SignToolCustomPath = $CurrentUserConfigurations.SignToolCustomPath

        }

        if ($CertPath) {

            Write-Verbose -Message 'Removing the CertPath'

            $UserConfigurationsObject.CertificatePath = ''

        }

        else {

            $UserConfigurationsObject.CertificatePath = $CurrentUserConfigurations.CertificatePath

        }

        if ($CertCN) {

            Write-Verbose -Message 'Removing the CertCN'

            $UserConfigurationsObject.CertificateCommonName = ''

        }

        else {

            $UserConfigurationsObject.CertificateCommonName = $CurrentUserConfigurations.CertificateCommonName

        }

        if ($StrictKernelPolicyGUID) {

            Write-Verbose -Message 'Removing the StrictKernelPolicyGUID'

            $UserConfigurationsObject.StrictKernelPolicyGUID = ''

        }

        else {

            $UserConfigurationsObject.StrictKernelPolicyGUID = $CurrentUserConfigurations.StrictKernelPolicyGUID

        }

        if ($StrictKernelNoFlightRootsPolicyGUID) {

            Write-Verbose -Message 'Removing the StrictKernelNoFlightRootsPolicyGUID'

            $UserConfigurationsObject.StrictKernelNoFlightRootsPolicyGUID = ''

        }

        else {

            $UserConfigurationsObject.StrictKernelNoFlightRootsPolicyGUID = $CurrentUserConfigurations.StrictKernelNoFlightRootsPolicyGUID

        }

        if ($LastUpdateCheck) {

            Write-Verbose -Message 'Removing the LastUpdateCheck'

            $UserConfigurationsObject.LastUpdateCheck = ''

        }

        else {

            $UserConfigurationsObject.LastUpdateCheck = $CurrentUserConfigurations.LastUpdateCheck

        }

    }

    end {

        if ($true -eq $ReturnAndDone) { return }

        # Update the User Configurations file

        Write-Verbose -Message 'Saving the changes'

        $UserConfigurationsObject | ConvertTo-Json | Set-Content -Path "$UserAccountDirectoryPath\.WDACConfig\UserConfigurations.json"

    }

    <#

.SYNOPSIS

    Removes common values for parameters used by WDACConfig module

.LINK

    https://github.com/HotCakeX/Harden-Windows-Security/wiki/Remove-CommonWDACConfig

.DESCRIPTION

    Removes common values for parameters used by WDACConfig module from the User Configurations JSON file. If you don't use it with any parameters, then all User Configs will be deleted.

.COMPONENT

    Windows Defender Application Control, ConfigCI PowerShell module, WDACConfig module

.FUNCTIONALITY

    Removes common values for parameters used by WDACConfig module from the User Configurations JSON file. If you don't use it with any parameters, then all User Configs will be deleted.

.PARAMETER SignedPolicyPath

    Removes the SignedPolicyPath from User Configs

.PARAMETER UnsignedPolicyPath

    Removes the UnsignedPolicyPath from User Configs

.PARAMETER CertCN

    Removes the CertCN from User Configs

.PARAMETER SignToolPath

    Removes the SignToolPath from User Configs

.PARAMETER CertPath

    Removes the CertPath from User Configs

.PARAMETER StrictKernelPolicyGUID

    Removes the StrictKernelPolicyGUID from User Configs

.PARAMETER StrictKernelNoFlightRootsPolicyGUID

    Removes the StrictKernelNoFlightRootsPolicyGUID from User Configs

.PARAMETER LastUpdateCheck

    Using DontShow for this parameter which prevents common parameters from being displayed too

.INPUTS

    System.Management.Automation.SwitchParameter

.OUTPUTS

    System.String

#>

}

# SIG # Begin signature block

# MIILkgYJKoZIhvcNAQcCoIILgzCCC38CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCD8Ja0b2wfQAshk

# kWGiL4eeYJsMoTzOau+DerURpUBOBaCCB9AwggfMMIIFtKADAgECAhMeAAAABI80

# LDQz/68TAAAAAAAEMA0GCSqGSIb3DQEBDQUAME8xEzARBgoJkiaJk/IsZAEZFgNj

# b20xIjAgBgoJkiaJk/IsZAEZFhJIT1RDQUtFWC1DQS1Eb21haW4xFDASBgNVBAMT

# C0hPVENBS0VYLUNBMCAXDTIzMTIyNzExMjkyOVoYDzIyMDgxMTEyMTEyOTI5WjB5

# MQswCQYDVQQGEwJVSzEeMBwGA1UEAxMVSG90Q2FrZVggQ29kZSBTaWduaW5nMSMw

# IQYJKoZIhvcNAQkBFhRob3RjYWtleEBvdXRsb29rLmNvbTElMCMGCSqGSIb3DQEJ

# ARYWU3B5bmV0Z2lybEBvdXRsb29rLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP

# ADCCAgoCggIBAKb1BJzTrpu1ERiwr7ivp0UuJ1GmNmmZ65eckLpGSF+2r22+7Tgm

# pEifj9NhPw0X60F9HhdSM+2XeuikmaNMvq8XRDUFoenv9P1ZU1wli5WTKHJ5ayDW

# k2NP22G9IPRnIpizkHkQnCwctx0AFJx1qvvd+EFlG6ihM0fKGG+DwMaFqsKCGh+M

# rb1bKKtY7UEnEVAsVi7KYGkkH+ukhyFUAdUbh/3ZjO0xWPYpkf/1ldvGes6pjK6P

# US2PHbe6ukiupqYYG3I5Ad0e20uQfZbz9vMSTiwslLhmsST0XAesEvi+SJYz2xAQ

# x2O4n/PxMRxZ3m5Q0WQxLTGFGjB2Bl+B+QPBzbpwb9JC77zgA8J2ncP2biEguSRJ

# e56Ezx6YpSoRv4d1jS3tpRL+ZFm8yv6We+hodE++0tLsfpUq42Guy3MrGQ2kTIRo

# 7TGLOLpayR8tYmnF0XEHaBiVl7u/Szr7kmOe/CfRG8IZl6UX+/66OqZeyJ12Q3m2

# fe7ZWnpWT5sVp2sJmiuGb3atFXBWKcwNumNuy4JecjQE+7NF8rfIv94NxbBV/WSM

# pKf6Yv9OgzkjY1nRdIS1FBHa88RR55+7Ikh4FIGPBTAibiCEJMc79+b8cdsQGOo4

# ymgbKjGeoRNjtegZ7XE/3TUywBBFMf8NfcjF8REs/HIl7u2RHwRaUTJdAgMBAAGj

# ggJzMIICbzA8BgkrBgEEAYI3FQcELzAtBiUrBgEEAYI3FQiG7sUghM++I4HxhQSF

# hqV1htyhDXuG5sF2wOlDAgFkAgEIMBMGA1UdJQQMMAoGCCsGAQUFBwMDMA4GA1Ud

# DwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAAMBsGCSsGAQQBgjcVCgQOMAwwCgYIKwYB

# BQUHAwMwHQYDVR0OBBYEFOlnnQDHNUpYoPqECFP6JAqGDFM6MB8GA1UdIwQYMBaA

# FICT0Mhz5MfqMIi7Xax90DRKYJLSMIHUBgNVHR8EgcwwgckwgcaggcOggcCGgb1s

# ZGFwOi8vL0NOPUhPVENBS0VYLUNBLENOPUhvdENha2VYLENOPUNEUCxDTj1QdWJs

# aWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9u

# LERDPU5vbkV4aXN0ZW50RG9tYWluLERDPWNvbT9jZXJ0aWZpY2F0ZVJldm9jYXRp

# b25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwgccG

# CCsGAQUFBwEBBIG6MIG3MIG0BggrBgEFBQcwAoaBp2xkYXA6Ly8vQ049SE9UQ0FL

# RVgtQ0EsQ049QUlBLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZp

# Y2VzLENOPUNvbmZpZ3VyYXRpb24sREM9Tm9uRXhpc3RlbnREb21haW4sREM9Y29t

# P2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0

# aG9yaXR5MA0GCSqGSIb3DQEBDQUAA4ICAQA7JI76Ixy113wNjiJmJmPKfnn7brVI

# IyA3ZudXCheqWTYPyYnwzhCSzKJLejGNAsMlXwoYgXQBBmMiSI4Zv4UhTNc4Umqx

# pZSpqV+3FRFQHOG/X6NMHuFa2z7T2pdj+QJuH5TgPayKAJc+Kbg4C7edL6YoePRu

# HoEhoRffiabEP/yDtZWMa6WFqBsfgiLMlo7DfuhRJ0eRqvJ6+czOVU2bxvESMQVo

# bvFTNDlEcUzBM7QxbnsDyGpoJZTx6M3cUkEazuliPAw3IW1vJn8SR1jFBukKcjWn

# aau+/BE9w77GFz1RbIfH3hJ/CUA0wCavxWcbAHz1YoPTAz6EKjIc5PcHpDO+n8Fh

# t3ULwVjWPMoZzU589IXi+2Ol0IUWAdoQJr/Llhub3SNKZ3LlMUPNt+tXAs/vcUl0

# 7+Dp5FpUARE2gMYA/XxfU9T6Q3pX3/NRP/ojO9m0JrKv/KMc9sCGmV9sDygCOosU

# 5yGS4Ze/DJw6QR7xT9lMiWsfgL96Qcw4lfu1+5iLr0dnDFsGowGTKPGI0EvzK7H+

# DuFRg+Fyhn40dOUl8fVDqYHuZJRoWJxCsyobVkrX4rA6xUTswl7xYPYWz88WZDoY

# gI8AwuRkzJyUEA07IYtsbFCYrcUzIHME4uf8jsJhCmb0va1G2WrWuyasv3K/G8Nn

# f60MsDbDH1mLtzGCAxgwggMUAgEBMGYwTzETMBEGCgmSJomT8ixkARkWA2NvbTEi

# MCAGCgmSJomT8ixkARkWEkhPVENBS0VYLUNBLURvbWFpbjEUMBIGA1UEAxMLSE9U

# Q0FLRVgtQ0ECEx4AAAAEjzQsNDP/rxMAAAAAAAQwDQYJYIZIAWUDBAIBBQCggYQw

# GAYKKwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGC

# NwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQx

# IgQgxWrzX19u3JMK/mWaGKDkdfLnI5cAqQ58JZIeRHFhjJowDQYJKoZIhvcNAQEB

# BQAEggIAFB16+mYMHB/yZqf1gRp8NQjfoiSRalZg4MylaOJ6MAhQGRO9mm7rNIv7

# IN+JC2xxLQx3pk+o3TSVvZh9C0mZGVTMrsv6vqYVk/AlQh8C26FaNTNsx9Foph4/

# NMy1p8BV+g+Nz9gvBskn23IzFkIvvluLR4gMiyMt8I6KFhwexEasNGHimepzHVWN

# eiY1vyl1jDGyo+KvTjFvbJq3Lte35arJ1lQHfPBpIXiqZASbgmY9fzvjo35d6htB

# ewAAwLJCHTlbrVRjOBNFb2C6mvQhnAewiZ2c5WGDAXsolQ9TqMUszNqQ3OFyuBtz

# pwzaepjC4NzWKc1EFMf5EeyGqonisG0msJBxv9VY8mQyO//qvh0NIHLoNTjQ1J5z

# YeA32DcKIEch6J/p4KpV3pxezSZRpccHc1k8avhX1bGqy3yT1xjRKs5+NU+iydrv

# y6QkfIEioGwDHNWI1LXJLY7A97byX3jzvcujdReuM1qrSGbnm9wDtUHCMT/iIETu

# rXEuXfhyO89YI3AE8VEn+fZKTLSZPk1mga7ivx0UDoMqzuFRurUey62EONW6FHzC

# LlbcD6vwOQ4MzGNa0Vw39CAPpfFtQevfih8ebQGxc35bVCUjwUaY53/dqm7Bk3ii

# 6SmGeU/dqCsAV8uhIQLqWPr+ekNX2C/ym49qLOBSWmLei5h3uKQ=

# SIG # End signature block