monkey365

0.95.1

core/modules/monkeyruleset/private/ConvertTo-Query.ps1

# Monkey365 - the PowerShell Cloud Security Tool for Azure and Microsoft 365 (copyright 2022) by Juan Garrido
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

function ConvertTo-Query{
    <#
        .SYNOPSIS
        Returns a scriptblock object that represents the compiled query
 
        .DESCRIPTION
        Returns a scriptblock object that represents the compiled query
 
        .INPUTS
 
        .OUTPUTS
 
        .EXAMPLE
 
        .NOTES
            Author : Juan Garrido
            Twitter : @tr1ana
            File Name : ConvertTo-Query
            Version : 1.0
 
        .LINK
            https://github.com/silverhack/monkey365
    #>
    [CmdletBinding()]
    [OutputType([System.Management.Automation.ScriptBlock])]
    Param (
        [parameter(Mandatory=$true, ValueFromPipeline = $True, HelpMessage="Query object")]
        [Object]$InputObject
    )
    Process{
        $operator = $connectOperator = $null;
        #$finalquery = [System.String]::Empty
        $finalquery = [System.Text.StringBuilder]::new()
        Foreach($query in @($InputObject)){
            If($null -ne $query -and $null -ne $query.Psobject.Properties.Item('filter') -and $null -ne $query.filter){
                #$filters = @()
                $filters = [System.Collections.Generic.List`1[String]]::new()
                #Check if operator
                $operator = $query | Select-Object -ExpandProperty operator -ErrorAction Ignore
                #Check if connect operator
                $connectOperator = $query | Select-Object -ExpandProperty connectOperator -ErrorAction Ignore
                foreach($filter in $query.filter){
                    $newFilter = $filter | Resolve-Filter
                    If($newFilter){
                        #$filters+=$newFilter
                        [void]$filters.Add($newFilter);
                    }
                }
                If(@($filters).Count -eq 1 -and $null -eq $operator){
                    $q = (@($filters) -join ' ')
                    If($null -ne $connectOperator -and $null -ne (Get-LogicalOperator $connectOperator)){
                        $q = ("-{0} ({1})" -f $connectOperator,$q)
                    }
                    If($q.Length -gt 0){
                        #$finalquery = ("{0} {1}" -f $finalquery,$q)
                        [void]$finalquery.Append($q);
                    }
                }
                Elseif($null -ne $operator -and $null -ne (Get-LogicalOperator $operator)){
                    #$q = (@($filters).ForEach({"($_)"}) -join (' -{0} ' -f $operator))
                    $q = $filters -join (' -{0} ' -f $operator)
                    #Check if connect operator
                    If($null -ne $connectOperator -and $null -ne (Get-LogicalOperator $connectOperator)){
                        $q = ("-{0} ({1})" -f $connectOperator,$q)
                    }
                    If($q.Length -gt 0){
                        #$finalquery = ("{0} {1}" -f $finalquery,$q)
                        [void]$finalquery.Append($q);
                    }
                }
                Else{
                    Write-Warning -Message $Script:messages.BuildQueryGenericErrorMessage
                }
            }
            Else{
                Write-Warning -Message ($Script:messages.UnableToGetObjectProperty -f 'filter')
            }
        }
        If($null -ne (Get-Variable -Name queryIsOpen -ErrorAction Ignore) -and $queryIsOpen){
            #$finalquery = ("{0}}})" -f $finalquery,$q)
            [void]$finalquery.Append('})');
            Remove-Variable -Name queryIsOpen -Scope Script -Force -ErrorAction Ignore
        }
        If($finalquery.Length -gt 0){
            $finalquery.ToString().Trim();
        }
    }
}