core/modules/monkeylogger/output/Write-Slack.ps1
# Monkey365 - the PowerShell Cloud Security Tool for Azure and Microsoft 365 (copyright 2022) by Juan Garrido # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. Function Write-Slack { <# .SYNOPSIS .DESCRIPTION .INPUTS .OUTPUTS .EXAMPLE .NOTES Author : Juan Garrido Twitter : @tr1ana File Name : Write-Slack Version : 1.0 .LINK https://github.com/silverhack/monkey365 #> [CmdletBinding()] Param ( [parameter(ValueFromPipeline = $false,ValueFromPipeLineByPropertyName = $True)] [System.Management.Automation.InformationRecord] $Log, [parameter(ValueFromPipeline = $false,ValueFromPipeLineByPropertyName = $True)] [object] $Configuration ) Begin{ #$body = $null $shouldPublish = Confirm-Publication -Log $Log -Configuration $Configuration if($shouldPublish){ $formattedMessage = Get-FormattedMessage -Log $Log } else{ $formattedMessage = $null } } Process{ if($null -ne $formattedMessage){ try{ $WebHook = $Configuration.webHook $raw_body = @{ text = $formattedMessage color = "#142954" } #Check if extra parameters switch ($Configuration.PSObject.Properties.name){ 'channel' {$raw_body.channel = $Configuration.channel } 'username' {$raw_body.username = $Configuration.username} 'iconurl' {$raw_body.icon_url = $Configuration.iconurl} 'icon_emoji' {$raw_body.icon_emoji = $Configuration.icon_emoji} 'linknames' {$raw_body.link_names = 1} 'parse' {$raw_body.parse = $Configuration.Parse} 'UnfurlLinks' {$raw_body.unfurl_links = $Configuration.UnfurlLinks} 'UnfurlMedia' {$raw_body.unfurl_media = $Configuration.UnfurlMedia} } $body = $raw_body | ConvertTo-Json } catch{ $param = @{ MessageData = $_.Exception; Tags = @('SlackFormatError'); logLevel = 'Error'; callStack = (Get-PSCallStack | Select-Object -First 1); } Write-Debug @param #Set verbose $param.MessageData = $_.Exception.Message Write-Verbose @param $WebHook = $null } } else{ $WebHook = $null; } } End{ #Send message to slack channel if($null -ne $WebHook -and $null -ne $body){ try { $param = @{ uri = $WebHook; Method = 'Post'; body = $body; ContentType = 'application/json'; } Invoke-RestMethod @param } catch { $param = @{ MessageData = $_.Exception; Tags = @('SlackRequestError'); logLevel = 'Error'; callStack = (Get-PSCallStack | Select-Object -First 1); } Write-Debug @param #Set verbose $param.MessageData = $_.Exception.Message Write-Verbose @param } } } } |