refactor

WELA.ps1

@@ -1,147 +1,4 @@
-function CheckRegistryValue {
-    param (
-        [string]$registryPath,
-        [string]$valueName,
-        [int]$expectedValue
-    )
-
-    try {
-        $value = Get-ItemProperty -Path $registryPath -Name $valueName -ErrorAction Stop
-        if ($value.$valueName -eq $expectedValue) {
-            return $true
-        } else {
-            return $false
-        }
-    } catch {
-        return $false
-    }
-}
-
-function Set-Applicable {
-    param (
-        [string]$autidpolTxt,
-        [string]$jsonRulePath
-    )
-
-    $extractedGuids = [System.Collections.Generic.HashSet[string]]::new()
-    Get-Content -Path $autidpolTxt | Select-String -NotMatch "No Auditing" | ForEach-Object {
-        if ($_ -match '{(.*?)}') {
-            [void]$extractedGuids.Add($matches[1])
-        }
-    }
-
-    $pwshModuleLogging = CheckRegistryValue -registryPath "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\PowerShell\ModuleLogging" -valueName "EnableModuleLogging" -expectedValue 1
-    $pwshScriptLogging = CheckRegistryValue -registryPath "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" -valueName "EnableScriptBlockLogging" -expectedValue 1
-
-    $jsonContent = Get-Content -Path $jsonRulePath -Raw | ConvertFrom-Json
-    foreach ($rule in $jsonContent) {
-        $rule | Add-Member -MemberType NoteProperty -Name "applicable" -Value $false
-        if ($rule.channel -eq "pwsh") {
-            if ($rule.event_ids -contains "400") {
-                $rule.applicable = $true
-            } elseif ($rule.event_ids -contains "4103") {
-                $rule.applicable = $pwshModuleLogging
-            } elseif ($rule.event_ids -contains "4104") {
-                $rule.applicable = $pwshScriptLogging
-            }
-            continue
-        }
-        foreach ($guid in $rule.subcategory_guids) {
-            if ($extractedGuids.Contains($guid)) {
-                $rule.applicable = $true
-                break
-            }
-        }
-    }
-    return $jsonContent
-}
-
-function Get-RuleCounts {
-    param ($rules)
-    $levels = @("critical", "high", "medium", "low", "informational")
-    $counts = @{}
-
-    $rules | Group-Object -Property level | ForEach-Object {
-        $counts[$_.Name] = $_.Count
-    }
-
-    foreach ($level in $levels) {
-        if (-not $counts.ContainsKey($level)) {
-            $counts[$level] = 0
-        }
-    }
-
-    return $counts.GetEnumerator() | ForEach-Object {
-        [PSCustomObject]@{
-            Level = $_.Key
-            Count = $_.Value
-        }
-    }
-}
-
-function CalculateUsableRate {
-    param ($counts, $totalCounts)
-    $result = @()
-    $totalCounts | ForEach-Object {
-        $level = $_.Level
-        $total = $_.Count
-        $usableCount = ($counts | Where-Object Level -eq $level | Select-Object -ExpandProperty Count -First 1)
-        if ($null -eq $usableCount) { $usableCount = 0 }
-        $percentage = if ($total -ne 0) { "{0:N2}" -f ($usableCount / $total * 100) } else { "0.00" }
-        $result += [PSCustomObject]@{
-            Level = $level
-            UsableCount = $usableCount
-            TotalCount = $total
-            Percentage = $percentage
-        }
-    }
-    return $result
-}
-
-function CalculateTotalUsableRate {
-    param ($usableRate)
-    $totalUsable = ($usableRate | Measure-Object -Property UsableCount -Sum).Sum
-    $totalRulesCount = ($usableRate | Measure-Object -Property TotalCount -Sum).Sum
-    return "{0:N2}%" -f ($totalUsable / $totalRulesCount * 100)
-}
-
-function ShowRulesCountsByLevel {
-    param ($usableRate, $msg, $colorMsg)
-    Write-Host -NoNewline $msg
-    $color = if ($colorMsg -match "Disabled") { "Red" } elseif ($colorMsg -match "Partially") { "DarkYellow" } else { "Green" }
-    Write-Host "$colorMsg" -ForegroundColor $color
-    $levelColorMap = [ordered]@{
-        "critical" = "Red"
-        "high" = "DarkYellow"
-        "medium" = "Yellow"
-        "low" = "Green"
-        "informational" = "White"  # Assuming a default color for informational
-    }
-    $i = 0
-    Write-Host -NoNewline " - "
-    $usableRate | Sort-Object { $levelColorMap.Keys.IndexOf($_.Level) } | ForEach-Object {
-        $color = $levelColorMap[$_.Level]
-        Write-Host -NoNewline "$($_.Level): $($_.UsableCount) / $($_.TotalCount) ($($_.Percentage)%)" -ForegroundColor $color
-        if ($i -lt $usableRate.Count - 1)
-        {
-            Write-Host -NoNewline ", "
-        }
-        $i++
-    }
-    Write-Output ""
-    Write-Output ""
-}
-
-function Test-IsAdministrator {
-    $currentUser = [Security.Principal.WindowsIdentity]::GetCurrent()
-    $adminRole = [Security.Principal.WindowsBuiltInRole]::Administrator
-    return (New-Object Security.Principal.WindowsPrincipal($currentUser)).IsInRole($adminRole)
-}
-
-if (-not (Test-IsAdministrator)) {
-    Write-Output "This script must be run as an Administrator."
-    exit
-}
+Import-Module -Name ./WELAFunctions.psm1
 
 # Set the console encoding to UTF-8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8