WDACConfig

0.3.9

Shared/Select-LogProperties.psm1

                                Function Select-LogProperties {

    <#

    .SYNOPSIS

        Selects, processes and sorts the properties for the Code Integrity and AppLocker logs.

    #>

    Param (

        [PSCustomObject[]]$Logs

    )

    Return $Logs | Select-Object -Property @{

        Label      = 'File Name'

        Expression = {

            # Can't use Get-Item or Get-ChildItem because the file might not exist on the disk

            # Can't use Split-Path -LiteralPath with -Leaf parameter because not supported

            [System.String]$TempPath = Split-Path -LiteralPath $_.'File Name'

            $_.'File Name'.Replace($TempPath, '').TrimStart('\')

        }

    },

    'TimeCreated',

    'PolicyName',

    'ProductName',

    'FileVersion',

    'OriginalFileName',

    'FileDescription',

    'InternalName',

    'PackageFamilyName',

    @{

        Label      = 'Full Path'

        Expression = { $_.'File Name' }

    },

    'Validated Signing Level',

    'Requested Signing Level',

    'SI Signing Scenario',

    'UserId',

    @{

        Label      = 'Publishers'

        Expression = { [System.String[]]$_.'Publishers' }

    },

    'SHA256 Hash',

    'SHA256 Flat Hash',

    'SHA1 Hash',

    'SHA1 Flat Hash',

    'PolicyGUID',

    'PolicyHash',

    'ActivityId',

    'Process Name',

    'UserWriteable',

    'PolicyID',

    'Status',

    'USN',

    'SignatureStatus',

    'SignerInfo' | Sort-Object -Property TimeCreated -Descending

}

Export-ModuleMember -Function 'Select-LogProperties'

# SIG # Begin signature block

# MIILkgYJKoZIhvcNAQcCoIILgzCCC38CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBrARnsR+Q9BPLf

# +cLZxpVRgGTq9mgSJkwfWTuxZIY596CCB9AwggfMMIIFtKADAgECAhMeAAAABI80

# LDQz/68TAAAAAAAEMA0GCSqGSIb3DQEBDQUAME8xEzARBgoJkiaJk/IsZAEZFgNj

# b20xIjAgBgoJkiaJk/IsZAEZFhJIT1RDQUtFWC1DQS1Eb21haW4xFDASBgNVBAMT

# C0hPVENBS0VYLUNBMCAXDTIzMTIyNzExMjkyOVoYDzIyMDgxMTEyMTEyOTI5WjB5

# MQswCQYDVQQGEwJVSzEeMBwGA1UEAxMVSG90Q2FrZVggQ29kZSBTaWduaW5nMSMw

# IQYJKoZIhvcNAQkBFhRob3RjYWtleEBvdXRsb29rLmNvbTElMCMGCSqGSIb3DQEJ

# ARYWU3B5bmV0Z2lybEBvdXRsb29rLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP

# ADCCAgoCggIBAKb1BJzTrpu1ERiwr7ivp0UuJ1GmNmmZ65eckLpGSF+2r22+7Tgm

# pEifj9NhPw0X60F9HhdSM+2XeuikmaNMvq8XRDUFoenv9P1ZU1wli5WTKHJ5ayDW

# k2NP22G9IPRnIpizkHkQnCwctx0AFJx1qvvd+EFlG6ihM0fKGG+DwMaFqsKCGh+M

# rb1bKKtY7UEnEVAsVi7KYGkkH+ukhyFUAdUbh/3ZjO0xWPYpkf/1ldvGes6pjK6P

# US2PHbe6ukiupqYYG3I5Ad0e20uQfZbz9vMSTiwslLhmsST0XAesEvi+SJYz2xAQ

# x2O4n/PxMRxZ3m5Q0WQxLTGFGjB2Bl+B+QPBzbpwb9JC77zgA8J2ncP2biEguSRJ

# e56Ezx6YpSoRv4d1jS3tpRL+ZFm8yv6We+hodE++0tLsfpUq42Guy3MrGQ2kTIRo

# 7TGLOLpayR8tYmnF0XEHaBiVl7u/Szr7kmOe/CfRG8IZl6UX+/66OqZeyJ12Q3m2

# fe7ZWnpWT5sVp2sJmiuGb3atFXBWKcwNumNuy4JecjQE+7NF8rfIv94NxbBV/WSM

# pKf6Yv9OgzkjY1nRdIS1FBHa88RR55+7Ikh4FIGPBTAibiCEJMc79+b8cdsQGOo4

# ymgbKjGeoRNjtegZ7XE/3TUywBBFMf8NfcjF8REs/HIl7u2RHwRaUTJdAgMBAAGj

# ggJzMIICbzA8BgkrBgEEAYI3FQcELzAtBiUrBgEEAYI3FQiG7sUghM++I4HxhQSF

# hqV1htyhDXuG5sF2wOlDAgFkAgEIMBMGA1UdJQQMMAoGCCsGAQUFBwMDMA4GA1Ud

# DwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAAMBsGCSsGAQQBgjcVCgQOMAwwCgYIKwYB

# BQUHAwMwHQYDVR0OBBYEFOlnnQDHNUpYoPqECFP6JAqGDFM6MB8GA1UdIwQYMBaA

# FICT0Mhz5MfqMIi7Xax90DRKYJLSMIHUBgNVHR8EgcwwgckwgcaggcOggcCGgb1s

# ZGFwOi8vL0NOPUhPVENBS0VYLUNBLENOPUhvdENha2VYLENOPUNEUCxDTj1QdWJs

# aWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9u

# LERDPU5vbkV4aXN0ZW50RG9tYWluLERDPWNvbT9jZXJ0aWZpY2F0ZVJldm9jYXRp

# b25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwgccG

# CCsGAQUFBwEBBIG6MIG3MIG0BggrBgEFBQcwAoaBp2xkYXA6Ly8vQ049SE9UQ0FL

# RVgtQ0EsQ049QUlBLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZp

# Y2VzLENOPUNvbmZpZ3VyYXRpb24sREM9Tm9uRXhpc3RlbnREb21haW4sREM9Y29t

# P2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0

# aG9yaXR5MA0GCSqGSIb3DQEBDQUAA4ICAQA7JI76Ixy113wNjiJmJmPKfnn7brVI

# IyA3ZudXCheqWTYPyYnwzhCSzKJLejGNAsMlXwoYgXQBBmMiSI4Zv4UhTNc4Umqx

# pZSpqV+3FRFQHOG/X6NMHuFa2z7T2pdj+QJuH5TgPayKAJc+Kbg4C7edL6YoePRu

# HoEhoRffiabEP/yDtZWMa6WFqBsfgiLMlo7DfuhRJ0eRqvJ6+czOVU2bxvESMQVo

# bvFTNDlEcUzBM7QxbnsDyGpoJZTx6M3cUkEazuliPAw3IW1vJn8SR1jFBukKcjWn

# aau+/BE9w77GFz1RbIfH3hJ/CUA0wCavxWcbAHz1YoPTAz6EKjIc5PcHpDO+n8Fh

# t3ULwVjWPMoZzU589IXi+2Ol0IUWAdoQJr/Llhub3SNKZ3LlMUPNt+tXAs/vcUl0

# 7+Dp5FpUARE2gMYA/XxfU9T6Q3pX3/NRP/ojO9m0JrKv/KMc9sCGmV9sDygCOosU

# 5yGS4Ze/DJw6QR7xT9lMiWsfgL96Qcw4lfu1+5iLr0dnDFsGowGTKPGI0EvzK7H+

# DuFRg+Fyhn40dOUl8fVDqYHuZJRoWJxCsyobVkrX4rA6xUTswl7xYPYWz88WZDoY

# gI8AwuRkzJyUEA07IYtsbFCYrcUzIHME4uf8jsJhCmb0va1G2WrWuyasv3K/G8Nn

# f60MsDbDH1mLtzGCAxgwggMUAgEBMGYwTzETMBEGCgmSJomT8ixkARkWA2NvbTEi

# MCAGCgmSJomT8ixkARkWEkhPVENBS0VYLUNBLURvbWFpbjEUMBIGA1UEAxMLSE9U

# Q0FLRVgtQ0ECEx4AAAAEjzQsNDP/rxMAAAAAAAQwDQYJYIZIAWUDBAIBBQCggYQw

# GAYKKwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGC

# NwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQx

# IgQgKTxeGJeS1TiTWmKzvhw75kgGKmzOwpUS6F/5uO8SzuowDQYJKoZIhvcNAQEB

# BQAEggIAU8WidlIB9O6kdBCL5/wQF4nC9OQRXlPrltxd//m/IJNyybGwEFEaO3sF

# rTDXK//NNJ2Dq9c4rVYtWGdn+nrwtSOaSOjgVSuM9APlaL3E4m5XlmuVAoivI8xk

# 8unVcqrp+erdGm26diTrkSReqGOgB42CL9w1kOjBlNeKGhj9EiqPTZXTMbXvnBvS

# WtCcIarkwoqJL3nsnSeZGKPssbGcN+tP8hiOxhVvcC49PrnPQ1sJkddZbG6M4LxX

# 9bRZHL/INKAYoq3YszWRrUlnRTn1aVTfllC6797OpEjlDboHmSxj8J1tzsJPFT6R

# l+QODdGl9Dy4dOlM52wz1JQqNYjgLFWV6xsyIXzZwv8wLrKFrdC1tcDGmjZJImO9

# lr7DKPgO8K4nPul6WiCmgZdxfGvXvKACqRt5lxTEAdL8D1mjmBqklBMl+b56c1PO

# 1ij6P0n7MMEnYy9P3LcXbpBa33HTgRIrnXcxVY6pnXGl2Nv3lp04jbD15VEZ3BE/

# XhZMv2v5nttu617imdo9oTSoau7tiRi717gkjj7tGQd42XhuR+KnwMBe/xiUpy4e

# zZ/6aOaB2QVoMimYFGhU0jCDYENa+tMmCQmCiuK67aF8uurO6tQ6tYbJY7VXZgHd

# jMgXD5Hov7ILI5Svj4E3JJbym8Rg6jqO9lJOL40Qcl16D0F1CD4=

# SIG # End signature block