collectors/azure/appservices/Get-MonkeyAzAppServiceInfo.ps1
# Monkey365 - the PowerShell Cloud Security Tool for Azure and Microsoft 365 (copyright 2022) by Juan Garrido # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. function Get-MonkeyAzAppServiceInfo { <# .SYNOPSIS Collector to get information from Azure App Services .DESCRIPTION Collector to get information from Azure App Services .INPUTS .OUTPUTS .EXAMPLE .NOTES Author : Juan Garrido Twitter : @tr1ana File Name : Get-MonkeyAzAppServiceInfo Version : 1.0 .LINK https://github.com/silverhack/monkey365 #> [CmdletBinding()] param( [Parameter(Mandatory = $false,HelpMessage = "Background Collector ID")] [string]$collectorId ) begin { #Collector metadata $monkey_metadata = @{ Id = "az00002"; Provider = "Azure"; Resource = "AppServices"; ResourceType = $null; resourceName = $null; collectorName = "Get-MonkeyAzAppServiceInfo"; ApiType = "resourceManagement"; description = "Collector to get information from Azure App Services"; Group = @( "AppServices" ); Tags = @( ); references = @( "https://silverhack.github.io/monkey365/" ); ruleSuffixes = @( "az_app_services" ); dependsOn = @( ); enabled = $true; supportClientCredential = $true } #config $config = $O365Object.internal_config.ResourceManager | Where-Object { $_.Name -eq "azureWebApps" } | Select-Object -ExpandProperty resource #Get all sites $app_services = $O365Object.all_resources.Where({ $_.type -eq 'Microsoft.Web/sites' }) if (-not $app_services) { continue } #Set array $all_apps = New-Object System.Collections.Generic.List[System.Object] } process { $msg = @{ MessageData = ($message.MonkeyGenericTaskMessage -f $collectorId,"Azure app services",$O365Object.current_subscription.displayName); callStack = (Get-PSCallStack | Select-Object -First 1); logLevel = 'info'; InformationAction = $O365Object.InformationAction; Tags = @('AzureAPPServices'); } Write-Information @msg if ($app_services.Count -gt 0) { $new_arg = @{ APIVersion = $config.api_version; } $p = @{ ScriptBlock = { Get-MonkeyAzAppService -InputObject $_ }; Arguments = $new_arg; Runspacepool = $O365Object.monkey_runspacePool; ReuseRunspacePool = $true; Debug = $O365Object.VerboseOptions.Debug; Verbose = $O365Object.VerboseOptions.Verbose; MaxQueue = $O365Object.nestedRunspaces.MaxQueue; BatchSleep = $O365Object.nestedRunspaces.BatchSleep; BatchSize = $O365Object.nestedRunspaces.BatchSize; } $all_apps = $app_services | Invoke-MonkeyJob @p } } end { if ($all_apps) { $all_apps.PSObject.TypeNames.Insert(0,'Monkey365.Azure.WebApps') [pscustomobject]$obj = @{ Data = $all_apps; Metadata = $monkey_metadata; } $returnData.az_app_services = $obj } else { $msg = @{ MessageData = ($message.MonkeyEmptyResponseMessage -f "Azure app services",$O365Object.TenantID); callStack = (Get-PSCallStack | Select-Object -First 1); logLevel = "verbose"; InformationAction = $O365Object.InformationAction; Tags = @('AzureAppServicesEmptyResponse'); Verbose = $O365Object.Verbose; } Write-Verbose @msg } } } |