Private/Test-FPDetectionRule.ps1
|
function Test-FPDetectionRule { <# .SYNOPSIS Return TRUE if detection rule is valid .PARAMETER DataSet XML data from control file import .PARAMETER RuleName Name of rule in control XML file #> param ( [parameter(Mandatory = $True)]$DataSet, [parameter(Mandatory = $True)][ValidateNotNullOrEmpty()][string] $RuleName ) Write-FPLog "detection rule: $RuleName" try { $detectionRule = $DataSet.configuration.detectionrules.detectionrule | Where-Object { $_.name -eq $RuleName } $rulePath = $detectionRule.path Write-FPLog "detection test: $rulePath" Write-Output (Test-Path $rulePath) } catch {} } |