Module/Rule.VsphereKernelActiveDumpPartition/Convert/Methods.ps1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License.
#region Method Functions

<#
    .SYNOPSIS
        Takes the Rawstring from the fix text of a VsphereKernelActiveDumpPartitionRule.
 
    .PARAMETER RawString
        An array of the raw string data taken from the Fix text of the STIG.
#>

function Get-VsphereKernelActiveDumpPartition
{
    [CmdletBinding()]
    [OutputType([object])]
    param
    (
        [Parameter(Mandatory = $true)]
        [psobject]
        $FixText
    )

    if ($FixText -match 'coredump.partition')
    {
        $kernelActiveDumpPartitionEnabled = ($FixText | Select-String -Pattern '(?<=coredump.network.set\()(.\w+)(?=\))').Matches.Value
    }

    if ($null -ne $kernelActiveDumpPartitionEnabled)
    {
        Write-Verbose -Message $("[$($MyInvocation.MyCommand.Name)] Found Host Kernel Active Dump Partition Enabled: {0}" -f $kernelActiveDumpPartitionEnabled)
        return $kernelActiveDumpPartitionEnabled
    }
    else
    {
        return $null
    }
}