Functions/Get-ECSWSUSUpdate.ps1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
Function Get-ECSWSUSUpdate
    {
    <#
    .SYNOPSIS
    This gets a update from the WSUS Database. This object is needed for other commands, but can be used for standalone information.
 
    .DESCRIPTION
    This gets a update from the WSUS Database. This object is needed for other commands, but can be used for standalone information.
 
    .PARAMETER Update
    This is the naming pattern of the update you're querying.
 
    It can be the updateid, the kb number, a security builitin, or a pattern of general text in the default title of a given update
 
    .EXAMPLE
    This example gets any update with KB3150513 in the default title or the specific update with the id 423E965F-7870-457C-8C29-18D74EAC29B0
    Get-ECSWSUSUpdate -Update @("*KB3150513*","423E965F-7870-457C-8C29-18D74EAC29B0")
 
    #>

    [CmdletBinding()]
    

    Param
        (
        #############################################################
        #Update

        [Parameter(
            ParameterSetName = "Update",
            ValueFromPipeline = $true,
            Mandatory=$false
            )]
        [ValidateNotNullorEmpty()]
        $Update = "%"

        )

    Process
        {
        #########################################################################
        #Global Params

        $WSUSSQLServerName = $Global:ECSWSUSDatabaseConnection.WSUSSQLServerName
        Write-Verbose "WSUSSQLServerName = $($WSUSSQLServerName)"
        $WSUSDatabaseName = $Global:ECSWSUSDatabaseConnection.WSUSDatabaseName
        Write-Verbose "WSUSDatabaseName = $($WSUSDatabaseName)"
        $Credential = $Global:ECSWSUSDatabaseConnection.Credential
        
        #END Global Params
        #########################################################################

        #########################################################################
        #Test connection state

        Try
            {
            Write-Verbose "Testing the WSUS database connectivity before querying WSUS"
            $TestWSUSConnectionState = Test-ECSWSUSDatabaseConnected
            If ($TestWSUSConnectionState.OverallStatus -eq $false)
                {
                Throw "Either you are not connected to the WSUS database, or we had an error. Please run Test-ECSWSUSDatabaseConnected to determine the detailed status"
                }
            }
        Catch
            {
            Throw "Something went wrong with the testing your WSUS connection, exception message = $($_.Exception.Message)"

            }

        #END Test connection state
        #########################################################################

        
        #Loop through all updates
        Foreach ($UpdateToProcess in $Update)
            {
            #########################################################################
            #Replace any "*" for % in the update name

            If ($UpdateToProcess -match "\*")
                {
                Write-Verbose -Message "We found an asterix, in the update name $($UpdateToProcess), replacing with a percentage sign" 
                $UpdateToProcess = $UpdateToProcess -replace "\*","%"
                }

            #END Replace any "*" for % in the update name
            #########################################################################

            #########################################################################
            #Define dynamic SQL query

            $SQLQueryDefinition = @"
--Your SUSDB Name
Use SUSDB
 
SELECT [UpdateId]
      ,[RevisionNumber]
      ,[DefaultTitle]
      ,[DefaultDescription]
      ,[ClassificationId]
      ,[ArrivalDate]
      ,[CreationDate]
      ,[IsDeclined]
      ,[IsWsusInfrastructureUpdate]
      ,[MsrcSeverity]
      ,[PublicationState]
      ,[UpdateType]
      ,[UpdateSource]
      ,[KnowledgebaseArticle]
      ,[SecurityBulletin]
      ,[InstallationCanRequestUserInput]
      ,[InstallationRequiresNetworkConnectivity]
      ,[InstallationImpact]
      ,[InstallationRebootBehavior]
  FROM [SUSDB].[PUBLIC_VIEWS].[vUpdate]
  where
   (
   SecurityBulletin like '$($UpdateToProcess)'
   or
   DefaultTitle like '$($UpdateToProcess)'
 
 
"@


            #########################################################################
            #Test if the desired update pattern is a GUID

            Try
                {
                $UpdateToProcessInt = [GUID]$UpdateToProcess
                Write-Verbose "We identified a GUID"
                $SQLQueryDefinition += @"
 or
 UpdateId = '$($UpdateToProcessInt)'
"@


                }
            Catch
                {

                }

            #END Test if the desired update pattern is a GUID
            #########################################################################

            #########################################################################
            #Test if the desired update pattern is an int

            Try
                {
                $UpdateToProcessInt = [int]$UpdateToProcess
                Write-Verbose "We identified an int"
                $SQLQueryDefinition += @"
or
KnowledgebaseArticle = $($UpdateToProcess)
"@


                }
            Catch
                {
                }

            #END Test if the desired update pattern is an int
            #########################################################################

            #Adding the closing parentheses

$SQLQueryDefinition += @"
)
"@



            #END Define dynamic SQL query
            #########################################################################

            #########################################################################
            #Executing SQL query to get all updates
            Try
                {
                #Formulating base command
                $SQLCommandToRun = '$SQLQuery' + " = Invoke-Sqlcmd -ServerInstance $WSUSSQLServerName -Database $WSUSDatabaseName -AbortOnError" + ' -Query $SQLQueryDefinition' + ' -ErrorAction "Stop"'

                #Checking if you wanted PassThru or SQL Auth
                If ($Credential -ne $null)
                    {
                    Write-Verbose "AuthenticationType = SQLAuth"
                    $SQLCommandToRun = $SQLCommandToRun  + ' -Credential $Credential'
                    }
                Else
                    {
                    Write-Verbose "AuthenticationType = Passthru"
                    }

                #Executing command
                Write-Verbose "Executing the following command: $($SQLCommandToRun)"
                Write-Verbose "The following query is being executed:"
                Write-Verbose $SQLQueryDefinition

                Invoke-Expression -Command $($SQLCommandToRun)

                #Making sure you had results, if not we're throwing an error
                $MeaureSQLQueryCount = $SQLQuery | Measure-Object | Select-Object -ExpandProperty count
                If ($MeaureSQLQueryCount -ge 1)
                    {
                    $SQLQuery
                    }
                Else
                    {
                    Throw "No results querying update $($Update)"
                    }



                }
            Catch
                {
                Throw "Something went wrong with the SQL query, exception message = $($_.Exception.Message)"
                }

            #END Executing SQL query
            #########################################################################
            }
        }
    }