mirror of
https://github.com/Yamato-Security/WELA.git
synced 2026-11-02 11:18:18 +01:00
Add typed native WEC runtime observations (#424)
* Observe typed native WEC subscription runtime status * Link typed WEC runtime changelog to PR 424 * Pass a native null source for subscription runtime queries * Ignore unused count storage for native null WEC variants * Keep unavailable WEC source inventories unknown and diagnose native XML reads * Read native WEC subscription XML with bounded explicit Unicode pipes * Use bounded Unicode subscription reads in runtime observations and cleanup * Decode native WEC XML BOMs without unsupported Unicode switch * Describe strict native WEC XML byte decoding * Reference System.Xml explicitly when compiling under Windows PowerShell * Regenerate website changelog snapshots with their proper headers
This commit is contained in:
1 parent
5ba53fbcfb
commit
913b1dfaee
19 files changed
+650
-5
No files matched your search
@@ -148,6 +148,8 @@ function Get-WelaRetentionSubscriptions {
|
||||
foreach ($id in $Ids) {
|
||||
$definition=Get-WelaRetentionNativeEvidence 'wecutil.exe' @('gs',$id,'/f:xml')
|
||||
$runtime=Get-WelaRetentionNativeEvidence 'wecutil.exe' @('gr',$id)
|
||||
try {$typedRuntime=Get-WelaWecRuntime -Id $id}
|
||||
catch {$typedRuntime=[pscustomobject]@{Status='Unknown';Diagnostic=$_.Exception.Message;ReadyRuleCredit=0}}
|
||||
$enabled=$null; $query=$null; $scope='Unknown'; $diagnostic=''
|
||||
if ($definition.Status -eq 'CommandSucceeded') {
|
||||
try {
|
||||
@@ -158,7 +160,7 @@ function Get-WelaRetentionSubscriptions {
|
||||
$query=ConvertFrom-WelaWefQuery $queryNodes[0].InnerText; $enabled=$enabledNodes[0].InnerText -eq 'true'; $scope='NativeQueryObserved'
|
||||
} catch { $diagnostic=$_.ToString() }
|
||||
}
|
||||
[pscustomobject]@{ Id=$id; Enabled=$enabled; QueryScope=$scope; Query=$query; Definition=$definition; Runtime=$runtime; Diagnostic=$diagnostic; DeliveryHealth='Unknown'; Backlog='Unknown'; ActualArrival='Not tested' }
|
||||
[pscustomobject]@{ Id=$id; Enabled=$enabled; QueryScope=$scope; Query=$query; Definition=$definition; Runtime=$runtime; TypedRuntime=$typedRuntime; Diagnostic=$diagnostic; DeliveryHealth='Unknown'; Backlog='Unknown'; ActualArrival='Not tested' }
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Reference in new issue
Block a user