WDACConfig

0.2.8-Beta3

Core/Get-CommonWDACConfig.psm1

                                Function Get-CommonWDACConfig {

    [CmdletBinding()]

    Param(

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$CertCN,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$CertPath,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$SignToolPath,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$SignedPolicyPath,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$UnsignedPolicyPath,

        [parameter(Mandatory = $false, DontShow = $true)][System.Management.Automation.SwitchParameter]$StrictKernelPolicyGUID,

        [parameter(Mandatory = $false, DontShow = $true)][System.Management.Automation.SwitchParameter]$StrictKernelNoFlightRootsPolicyGUID,

        [parameter(Mandatory = $false)][System.Management.Automation.SwitchParameter]$Open,

        [parameter(Mandatory = $false, DontShow = $true)][System.Management.Automation.SwitchParameter]$LastUpdateCheck

    )

    begin {

        # Importing the $PSDefaultParameterValues to the current session, prior to everything else

        . "$ModuleRootPath\CoreExt\PSDefaultParameterValues.ps1"

        # Importing the required sub-modules

        Write-Verbose -Message 'Importing the required sub-modules'

        Import-Module -FullyQualifiedName "$ModuleRootPath\Shared\Write-ColorfulText.psm1" -Force

        # Create User configuration folder if it doesn't already exist

        if (-NOT (Test-Path -Path "$UserAccountDirectoryPath\.WDACConfig\")) {

            New-Item -ItemType Directory -Path "$UserAccountDirectoryPath\.WDACConfig\" -Force -ErrorAction Stop | Out-Null

            Write-Verbose -Message 'The .WDACConfig folder in the current user folder has been created because it did not exist.'

        }

        # Create User configuration file if it doesn't already exist

        if (-NOT (Test-Path -Path "$UserAccountDirectoryPath\.WDACConfig\UserConfigurations.json")) {

            New-Item -ItemType File -Path "$UserAccountDirectoryPath\.WDACConfig\" -Name 'UserConfigurations.json' -Force -ErrorAction Stop | Out-Null

            Write-Verbose -Message 'The UserConfigurations.json file in \.WDACConfig\ folder has been created because it did not exist.'

        }

        if ($Open) {

            . "$UserAccountDirectoryPath\.WDACConfig\UserConfigurations.json"

            break

        }

        # Display this message if User Configuration file is empty

        if ($null -eq (Get-Content -Path "$UserAccountDirectoryPath\.WDACConfig\UserConfigurations.json")) {

            Write-Verbose -Message 'Your current WDAC User Configurations is empty.'

            # set a boolean value that returns from the Process and End blocks as well

            [System.Boolean]$ReturnAndDone = $true

            Return

        }

        Write-Verbose -Message 'Reading the current user configurations'

        [PSCustomObject]$CurrentUserConfigurations = Get-Content -Path "$UserAccountDirectoryPath\.WDACConfig\UserConfigurations.json"

        # If the file exists but is corrupted and has bad values, rewrite it

        try {

            $CurrentUserConfigurations = $CurrentUserConfigurations | ConvertFrom-Json

        }

        catch {

            Write-Warning -Message 'The UserConfigurations.json was corrupted, clearing it.'

            Set-Content -Path "$UserAccountDirectoryPath\.WDACConfig\UserConfigurations.json" -Value ''

        }

    }

    process {}

    end {

        if ($true -eq $ReturnAndDone) { return }

        # Use a switch statement to check which parameter is present and output the corresponding value from the json file

        switch ($true) {

            $SignedPolicyPath.IsPresent { Write-Output -InputObject $CurrentUserConfigurations.SignedPolicyPath }

            $UnsignedPolicyPath.IsPresent { Write-Output -InputObject $CurrentUserConfigurations.UnsignedPolicyPath }

            $SignToolPath.IsPresent { Write-Output -InputObject $CurrentUserConfigurations.SignToolCustomPath }

            $CertCN.IsPresent { Write-Output -InputObject $CurrentUserConfigurations.CertificateCommonName }

            $StrictKernelPolicyGUID.IsPresent { Write-Output -InputObject $CurrentUserConfigurations.StrictKernelPolicyGUID }

            $StrictKernelNoFlightRootsPolicyGUID.IsPresent { Write-Output -InputObject $CurrentUserConfigurations.StrictKernelNoFlightRootsPolicyGUID }

            $CertPath.IsPresent { Write-Output -InputObject $CurrentUserConfigurations.CertificatePath }

            $LastUpdateCheck.IsPresent { Write-Output -InputObject $CurrentUserConfigurations.LastUpdateCheck }

            Default {

                # If no parameter is present, display all the values

                Write-ColorfulText -Color Pink -InputText "`nThis is your current WDAC User Configurations: "

                Write-Output -InputObject $CurrentUserConfigurations

            }

        }

    }

    <#

.SYNOPSIS

    Query and Read common values for parameters used by WDACConfig module

.LINK

    https://github.com/HotCakeX/Harden-Windows-Security/wiki/Get-CommonWDACConfig

.DESCRIPTION

    Reads and gets the values from the User Config Json file, used by the module internally and also to display the values on the console for the user

.COMPONENT

    Windows Defender Application Control, ConfigCI PowerShell module, WDACConfig module

.FUNCTIONALITY

    Reads and gets the values from the User Config Json file, used by the module internally and also to display the values on the console for the user

.PARAMETER SignedPolicyPath

    Shows the path to a Signed WDAC xml policy

.PARAMETER UnsignedPolicyPath

    Shows the path to an Unsigned WDAC xml policy

.PARAMETER CertCN

    Shows the certificate common name

.PARAMETER SignToolPath

    Shows the path to the SignTool.exe

.PARAMETER CertPath

    Shows the path to a .cer certificate file

.PARAMETER Open

    Opens the User Configuration file with the default app assigned to open Json files

.PARAMETER StrictKernelPolicyGUID

    Shows the GUID of the Strict Kernel mode policy

.PARAMETER StrictKernelNoFlightRootsPolicyGUID

    Shows the GUID of the Strict Kernel no Flights root mode policy

.PARAMETER LastUpdateCheck

    Shows the date of the last update check

.PARAMETER Verbose

    Shows verbose messages

.INPUTS

    System.Management.Automation.SwitchParameter

.OUTPUTS

    System.Object[]

    System.DateTime

    System.String

    System.Guid

#>

}

# SIG # Begin signature block

# MIILkgYJKoZIhvcNAQcCoIILgzCCC38CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCOyuWSryeC5fZv

# fTZcrnYA5g03GBJKkpaSpXakQXtKjqCCB9AwggfMMIIFtKADAgECAhMeAAAABI80

# LDQz/68TAAAAAAAEMA0GCSqGSIb3DQEBDQUAME8xEzARBgoJkiaJk/IsZAEZFgNj

# b20xIjAgBgoJkiaJk/IsZAEZFhJIT1RDQUtFWC1DQS1Eb21haW4xFDASBgNVBAMT

# C0hPVENBS0VYLUNBMCAXDTIzMTIyNzExMjkyOVoYDzIyMDgxMTEyMTEyOTI5WjB5

# MQswCQYDVQQGEwJVSzEeMBwGA1UEAxMVSG90Q2FrZVggQ29kZSBTaWduaW5nMSMw

# IQYJKoZIhvcNAQkBFhRob3RjYWtleEBvdXRsb29rLmNvbTElMCMGCSqGSIb3DQEJ

# ARYWU3B5bmV0Z2lybEBvdXRsb29rLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP

# ADCCAgoCggIBAKb1BJzTrpu1ERiwr7ivp0UuJ1GmNmmZ65eckLpGSF+2r22+7Tgm

# pEifj9NhPw0X60F9HhdSM+2XeuikmaNMvq8XRDUFoenv9P1ZU1wli5WTKHJ5ayDW

# k2NP22G9IPRnIpizkHkQnCwctx0AFJx1qvvd+EFlG6ihM0fKGG+DwMaFqsKCGh+M

# rb1bKKtY7UEnEVAsVi7KYGkkH+ukhyFUAdUbh/3ZjO0xWPYpkf/1ldvGes6pjK6P

# US2PHbe6ukiupqYYG3I5Ad0e20uQfZbz9vMSTiwslLhmsST0XAesEvi+SJYz2xAQ

# x2O4n/PxMRxZ3m5Q0WQxLTGFGjB2Bl+B+QPBzbpwb9JC77zgA8J2ncP2biEguSRJ

# e56Ezx6YpSoRv4d1jS3tpRL+ZFm8yv6We+hodE++0tLsfpUq42Guy3MrGQ2kTIRo

# 7TGLOLpayR8tYmnF0XEHaBiVl7u/Szr7kmOe/CfRG8IZl6UX+/66OqZeyJ12Q3m2

# fe7ZWnpWT5sVp2sJmiuGb3atFXBWKcwNumNuy4JecjQE+7NF8rfIv94NxbBV/WSM

# pKf6Yv9OgzkjY1nRdIS1FBHa88RR55+7Ikh4FIGPBTAibiCEJMc79+b8cdsQGOo4

# ymgbKjGeoRNjtegZ7XE/3TUywBBFMf8NfcjF8REs/HIl7u2RHwRaUTJdAgMBAAGj

# ggJzMIICbzA8BgkrBgEEAYI3FQcELzAtBiUrBgEEAYI3FQiG7sUghM++I4HxhQSF

# hqV1htyhDXuG5sF2wOlDAgFkAgEIMBMGA1UdJQQMMAoGCCsGAQUFBwMDMA4GA1Ud

# DwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAAMBsGCSsGAQQBgjcVCgQOMAwwCgYIKwYB

# BQUHAwMwHQYDVR0OBBYEFOlnnQDHNUpYoPqECFP6JAqGDFM6MB8GA1UdIwQYMBaA

# FICT0Mhz5MfqMIi7Xax90DRKYJLSMIHUBgNVHR8EgcwwgckwgcaggcOggcCGgb1s

# ZGFwOi8vL0NOPUhPVENBS0VYLUNBLENOPUhvdENha2VYLENOPUNEUCxDTj1QdWJs

# aWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9u

# LERDPU5vbkV4aXN0ZW50RG9tYWluLERDPWNvbT9jZXJ0aWZpY2F0ZVJldm9jYXRp

# b25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwgccG

# CCsGAQUFBwEBBIG6MIG3MIG0BggrBgEFBQcwAoaBp2xkYXA6Ly8vQ049SE9UQ0FL

# RVgtQ0EsQ049QUlBLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZp

# Y2VzLENOPUNvbmZpZ3VyYXRpb24sREM9Tm9uRXhpc3RlbnREb21haW4sREM9Y29t

# P2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0

# aG9yaXR5MA0GCSqGSIb3DQEBDQUAA4ICAQA7JI76Ixy113wNjiJmJmPKfnn7brVI

# IyA3ZudXCheqWTYPyYnwzhCSzKJLejGNAsMlXwoYgXQBBmMiSI4Zv4UhTNc4Umqx

# pZSpqV+3FRFQHOG/X6NMHuFa2z7T2pdj+QJuH5TgPayKAJc+Kbg4C7edL6YoePRu

# HoEhoRffiabEP/yDtZWMa6WFqBsfgiLMlo7DfuhRJ0eRqvJ6+czOVU2bxvESMQVo

# bvFTNDlEcUzBM7QxbnsDyGpoJZTx6M3cUkEazuliPAw3IW1vJn8SR1jFBukKcjWn

# aau+/BE9w77GFz1RbIfH3hJ/CUA0wCavxWcbAHz1YoPTAz6EKjIc5PcHpDO+n8Fh

# t3ULwVjWPMoZzU589IXi+2Ol0IUWAdoQJr/Llhub3SNKZ3LlMUPNt+tXAs/vcUl0

# 7+Dp5FpUARE2gMYA/XxfU9T6Q3pX3/NRP/ojO9m0JrKv/KMc9sCGmV9sDygCOosU

# 5yGS4Ze/DJw6QR7xT9lMiWsfgL96Qcw4lfu1+5iLr0dnDFsGowGTKPGI0EvzK7H+

# DuFRg+Fyhn40dOUl8fVDqYHuZJRoWJxCsyobVkrX4rA6xUTswl7xYPYWz88WZDoY

# gI8AwuRkzJyUEA07IYtsbFCYrcUzIHME4uf8jsJhCmb0va1G2WrWuyasv3K/G8Nn

# f60MsDbDH1mLtzGCAxgwggMUAgEBMGYwTzETMBEGCgmSJomT8ixkARkWA2NvbTEi

# MCAGCgmSJomT8ixkARkWEkhPVENBS0VYLUNBLURvbWFpbjEUMBIGA1UEAxMLSE9U

# Q0FLRVgtQ0ECEx4AAAAEjzQsNDP/rxMAAAAAAAQwDQYJYIZIAWUDBAIBBQCggYQw

# GAYKKwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGC

# NwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQx

# IgQgeG5h+rymfqyVsshNAUeqb2wQvknjK1AaF0rJrr9PCDYwDQYJKoZIhvcNAQEB

# BQAEggIAHV1XSop03pLyqANL0TrpbYHxtrVVfoyYUPR9Y5ut8SS0v27kRj9+GYEo

# XcIFvdX3PSpi7R3AMaSZoTfYRqj4P0X/gha8ebzoiukMUv1fRXmnBR0OV/tqWORD

# /dy8fnVdY8AKEN5Z9ZGdDFmzQlQm5BlfxwvR/JAnUcU9iEiDdfkdx6xhrVigl2Ds

# kI1RK4m0W5rGTizV/SEuzic3nXVsiVC1QT9n8yoOTZdsaBimc4tagnbB8S94IB94

# 9X4iQlXJnEj4IL7es5XM4eBXDoWOL4BY0pKcVtrEYqqryTzs81KEZcwjRc+XjKOO

# 66ElE9qArUxkVnE0YNlVleaoesgZHmjGxlIBUTn3cBkwiZFIln+CmNy2yQ+FZQsf

# dpEI+R1lHtHPmO1tzaiPcEnWy/VltzcXyarTO24tVF6iBvDQq/4LoaXy6TnxaBZH

# CgBS7rumx1FoUTznVSk/FIFG4IaDcdz2imdzU6cv+jsXx4dzdc0KFNUAVcwvYLB/

# a9xlm72PkrnK/yO7jLK6NFhrp4kCU2Px7vlObXZMSaSkstCkLGmrDeEBkBJrAUUW

# lPcRLIa7xozbjHUbHnxJzWYMNcFBkyRZh85M2AicrnoxS6j4AwsJI0cAAmxcdcd2

# 9CoCVMQDZQeXfqWDUi6elRIlXObGuaF9U1BDXpIXb2++1UaB09Q=

# SIG # End signature block