Merge pull request #312 from HotCakeX/WDACConfig-v0.4.3

WDACConfig v0.4.3
HotCakeX · Aug 5, 2024 · 3983d67 · 3983d67
2 parents 16b4d76 + 1601122
commit 3983d67
Show file tree

Hide file tree

Showing 96 changed files with 2,248 additions and 1,265 deletions.
diff --git a/WDACConfig/.editorconfig b/WDACConfig/.editorconfig
@@ -0,0 +1,19 @@
+[*.cs]
+
+# CA1304: Specify CultureInfo
+dotnet_diagnostic.CA1304.severity = error
+
+# CA1305: Specify IFormatProvider
+dotnet_diagnostic.CA1305.severity = error
+
+# CA1307: Specify StringComparison for clarity
+dotnet_diagnostic.CA1307.severity = error
+
+# CA1310: Specify StringComparison for correctness
+dotnet_diagnostic.CA1310.severity = error
+
+# CA1401: P/Invokes should not be visible
+dotnet_diagnostic.CA1401.severity = error
+
+# CA1303: Do not pass literals as localized parameters
+dotnet_diagnostic.CA1303.severity = silent
diff --git a/WDACConfig/Program.cs b/WDACConfig/Program.cs
@@ -0,0 +1,14 @@
+using System.Security.Cryptography.X509Certificates;
+
+// Some test
+List<WDACConfig.AllCertificatesGrabber.AllFileSigners> Certificates = WDACConfig.AllCertificatesGrabber.WinTrust.GetAllFileSigners(@"");
+
+List<string> subjects = Certificates
+    .Select(Cert => Cert.Chain?.ChainElements?.Cast<X509ChainElement>().FirstOrDefault()?.Certificate?.Subject?.ToString())
+    .Where(subject => subject != null)
+    .ToList();
+
+foreach (var item in subjects)
+{
+    Console.WriteLine(item);
+}
diff --git a/WDACConfig/Utilities/Hashes.csv b/WDACConfig/Utilities/Hashes.csv
@@ -29,26 +29,20 @@
 "Public\MockConfigCIBootstrap.psm1","MockConfigCIBootstrap.psm1","A98D7053DA23D53B65910C01F14936E1C735403A1A94B58D15D53F1B9718D69EC14465CB137DAD20BF7B61C7B13E65C7DA168B057315AE3E5B24F3640EAAF093","969F27B671BBB9D8F3CE694A2AF5FFB31CDD88ECCD6D1074531045872DD382645078603B5641DB966ED4F7051171B2712751EFCB7DE70F00B777311FF5F8828A"
 "Public\Write-FinalOutput.psm1","Write-FinalOutput.psm1","2B4737466EA9E5A8DEC4B06A6414473D7B86E94CFF4498AFCA08CC0174ED705BC52AA722A8D4E30C5DDE1E8B347ADDE0DD4B010A2049D154758D86DDF60AF0B1","DE851568BE3A0EA7095AEB753EC2BA1A1798EB4ECF1A08C8E8617791649D5543CCA0A9A87462408E7A9EBCBFF070250E0125E2C0051F3070512CC19FFB075628"
 "Resources\PolicyRuleOptions.Json","PolicyRuleOptions.Json","1519B7A7A031923471C33E2D16E7FF05F3E40F06C3728B0E04D9B5669F893E7907809EDAD55C84B24565EA7D5E669A2C3CEE2EB6DF42D5628901010C41D03635","A97AAF4AFC1194B65CF92E7D97EBD99652F2809037AB823F238362C16CF0E8CB3BDDFA72D17B81FA534FEA9BD0EEBD19681DB954254A9B9E7C376C43C9508FA6"
-"Shared\Get-GlobalRootDrives.psm1","Get-GlobalRootDrives.psm1","2939CCC216C0E6F8D6F69EBC66525364664378A65388DB13E58F79BC883A80284304A9B0B34579EC85FB9C48CCE15FCBA8A5A395C594D321D1310A717C727D6C","4C948562A91004F8837E4531E3E6B8892C1FB7D1DCA04968B30ED4A20736C6BA3C33085A0D9DCD729E0BE5EA8DFC7EC888EDF10101798877E6AF23EC51B6B316"
 "Shared\Get-KernelModeDrivers.psm1","Get-KernelModeDrivers.psm1","C0F97537F63B06D7FCD5BC575184004EED22307B12D19266A5AA454830A0ACA2AC51066C3DA63BC61DCF1E152678E39A37816CAAC1175AF2A251E9C9C0AEF78E","1BFAA72D4B019C94049F40CFD6FACC203A5551A4FE05DD8E467FFC3A8F25B6653CAB8E0D846882D802499ADA1F3391486C4EB35D401A4803B00900BF6721BD5D"
 "Shared\Get-KernelModeDriversAudit.psm1","Get-KernelModeDriversAudit.psm1","FFD3E5CCF2B48D34F4982F63A563C2D812362359D38C7EEA3029E2304CFFF679C991690A168B50C23736419AE0D17194097D59D757D44BBEB29D1F664A3C08E0","13BCAA129474CA20F72214C0982A269FB4E2207268348606866A75EDA0B151706E674A6BAAAB56DC39C48F427D640E04D3B166FECD2FB36527E267C88AC38E15"
 "Shared\Get-SignTool.psm1","Get-SignTool.psm1","B885EBCECA40FE65A0019F52BD691CCAE0321CD82B4D69B26660D6A7CC68DA41EA42B2AD403CECDE184527F985FDC5402E787EDA49FAE5A0EA6C085EDD84BCA4","673E68AEDA6A9AF8142259BD0EBE70E7C4EB2B2203CADBBCDC8AF1A140B48C6690159340F65360CC603480A4C533555505F7D53D3421B099D3B96899899D1EA7"
-"Shared\Invoke-CiSigning.psm1","Invoke-CiSigning.psm1","F02F311692F37CB7C635C603BD378D11B65AB5553F15B00C161ED223798F214366FFD78BCCCA4F60CDCEED00509AE97CC5B78AF951543E088C12DF1180DB2ACC","3BAB48423EE8CEF313478F9AFACCDBF07BFB2A43410EC35DBB05E62376EDCA7C2E718EB5767DE12A54CD90391CA67DCACD46B532D67F1BD454A7596836EB16D2"
 "Shared\New-SnapBackGuarantee.psm1","New-SnapBackGuarantee.psm1","929A99441FA45F2AB5630FFED5F4CBE783D81BDCBDC661BDEB8953689FAA549600A6AA7F50DAAB2270BFCEDD8C80906C80719D58360482BCFFF25F71628DF49A","71F0BB50F0D3DB370086DFB71A0BAD73EEBCB4142DBD5305DCEF5EE7DB2C34EA0B53589DF9BB94CFB68CD7DC8EB59A48C7E8253030D20CDE59E18D6A36DD253D"
 "Shared\Receive-CodeIntegrityLogs.psm1","Receive-CodeIntegrityLogs.psm1","1E0A94EB713FE409E34F186D802F9FBF6B033292DEF62ADEA6DB83276FC95F829D8622C4336A6AA25674183FBB280DBAD2A9097C8EB1F7875523903A11588A4F","527A0B9A9B5E516901B5277CC18260352DE1C1926C4A97CCDC6105EB8F7A37BBE9972DD7F2F7B5300F7477874512F215F49A34D771E7F640A620CE81070DCACA"
 "Shared\Remove-SupplementalSigners.psm1","Remove-SupplementalSigners.psm1","AE594EC9993298010418B1DA47C3FE357E9706FE6DE96FBA7CEA89425263FCB0A1DD819C198DD81A9D7F7484528BD61CA83114648EE721A0748318A042DC41F6","96C6210347A846567FD2BFC787EDE019A577002EDD0A84AAE97A4BE05B8671929A5116EE026A14F933F8E582A405131CA063160A71CE1E35E9A0A5F5A298E70D"
 "Shared\Select-LogProperties.psm1","Select-LogProperties.psm1","A44353FD8318D4A843E1592E85DAF3CE1C1DCDB9324D9AE7CD2897BE1A13BC3B13D971E74C85E45685E613293CCA2A1C8D3C6615F0ED73ED678F987D72A8D1D2","73A7CD2ECDFD3B7CDD5D770FC8D8239597E46A0DE4B74FFC9D0E84BEB8D0B26C04B01B68A83AD0ACB0A734777E5CB7D41BBBD80468EB391747DF627FA581DF95"
 "Shared\Set-LogPropertiesVisibility.psm1","Set-LogPropertiesVisibility.psm1","D0B4A97CF9F66BDDFCBB8BB38A932D2C3FAA9701391E62604A3F3406EC5B340184395A0D2015628A67808499A60FC5FA57CA5EF89F29AF2D1329093A063F0817","728146FD039BA5191FDC1A563D314C01BF35E7602F4C153B8DF8BA6BC42F4FE8590BACF8C5D7FDB9DA83EF1D87C158E6A937AC646411962342DF6C8F3602F4C5"
-"Shared\Set-LogSize.psm1","Set-LogSize.psm1","CB9183E62402A96C416EB79B971A1BF7D127E82501DFAA0B856436A58A241305D6C9D0BA01885A50145539CE9F3DE49BBBB23B31EEAECC5525D5E7878848F231","6E1824B3C213066AA9F29FB905078C41E9F2C1CE1D467FB929EE88E8AB89A0B06C7862DD4583913C17D5CFA7B94C16678D7CD6EC823803A91B7B40F97DDAC4CC"
 "Shared\Test-ECCSignedFiles.psm1","Test-ECCSignedFiles.psm1","EB21FB67A98E7C34C1DDFC50CC112F891FFB9645A83C1540FB5F6DF1B06100F3E62FF586E8106F41EC1A44F55390B316F1C97C6787FDB03016FB2661DB0997EA","AB1BDD09638BE0A0CBB785D3D6F71DA26F6139C5E4363A87035D10854446539AA3140995A627BB10E3EA8141BF88F33CE32FF80CB673951ADB1DB1DEAB49E545"
 "Shared\Test-KernelProtectedFiles.psm1","Test-KernelProtectedFiles.psm1","DDE1CBF943FED025F7D129D2CAE137B6DE75E0C79B29719F353DC7F7C8569879F253A531C2D5BC7131959E812D20A8DD1FA7E0752E27F0B3EB9865CEE1EC8E19","E9C5FEDC2D79B2573A9455EC114A837CA00031D2F21065FCAD9A76276FC6D753930D49E883603466B7A9421BAC815AC224523215D3B8EBACA2ADE84CBDF9459C"
 "Shared\Update-self.psm1","Update-self.psm1","73EC6664DDF14160350F7D536E1A817E8D65C1BC24236DB3BC18572C1CF3D0E1F6820EEC1C3759724363703E7BFEB9FCC2779E0252E24BCF371718EB86D991C8","7C0EF7056D135F2AC5F9E723CCB2270A462E369747C827B68A7E46862FD62B93F5848BC1CD2D5C9818B3B6918CE79A95D0953CF904CED1A0A06131AC41537523"
-"Shared\Write-ColorfulText.psm1","Write-ColorfulText.psm1","96AA27322EF9CD08D584A6592F001AABBE5F7F183E16673AB7EC6B1F1DEBFE95E045C20E6BF636528E3C3114215AC96A8B43910F70BD098EDBE50CDEFA7CCB76","5CA4F3EDB79DFE20976252EF0F9DC3881846F4E9ACF761544593AC2199B198ED209389F8C7A44105DDB300DD7A0F1BC748C3A3449CC3E623E966CBCFEB4779D3"
 "WDACSimulation\Compare-SignerAndCertificate.psm1","Compare-SignerAndCertificate.psm1","5393CA4707694802374865A95DC11958668F68FC7221D50E874F6F78843F11C113A05138895AB44FBF7A8C999CFEC02F389F42461DE79736A7FC82C5DFD28718","45BE9BF56A88DE2EFA34AF403F220001EE7CC94C736465A817B1DFE7F2B05F6A60B917B66673FD822EBD294F096036A567075D2BDD1A275F6876CF02526E5DA3"
 "WDACSimulation\Get-CertificateDetails.psm1","Get-CertificateDetails.psm1","4444456A2412C729206DC323E00F8529D0256C1BA5853194044056320056B9A4427D2F26147A84330FE4897CE08224921FACC2A9C3AE51E27F56066E6BD7AA46","6688BB4A7B205446CD4B2F53059C2838C1259CF7454CF67350E67A55784EA5A0A473BB3C92E0456C733039A26AD67F7AB62378D3DE0921A1F8024F91D5EDC8BE"
-"WDACSimulation\Get-FileRuleOutput.psm1","Get-FileRuleOutput.psm1","4F9982DC8D59260D2724CB26261538A818E345169489E3D17AAD31EC9321FC68F4605875CAA6D9F0B60AA6E24EB333C9CAB9F293914B1F4858C7EA916C7BADCE","4E0C7ACACA5B58BF6BD48E3B0B467179A5B501E0CA6200462D4ECD2E25CCAE3138D914F1173E4391A4DCF806E4B880E2B4136F3B8FA4D9A2E65510C808B7393E"
 "WDACSimulation\Get-SignerInfo.psm1","Get-SignerInfo.psm1","DD9B40FF3F0DE059662712938C76C73314EF444333916504CCDA79EC7ACF5040DA0A1BC1977B5A06FE9742FA05BD56E536C1CEF0F8B410FDC56D4F46083276E7","16B5A96AE906210D96135A83E8F720598958EC3AE7C02336411894D9E59FEB0A53DF5DCAFD84C47D6B26CBC4707714C768A5523942241230F88C3976ACA17204"
-"XMLOps\Build-SignerAndHashObjects.psm1","Build-SignerAndHashObjects.psm1","1163D4A2B88CBB6CDA4E11AFA042AE9A0396B2109CED4148B893869B202BEA98BA128B655DAB75EC73BA9A5E8DAFFAA910BD1477423F79766B2C2D04507E8EF5","2ACCC99E50B0909E0C323F3F35A63D5D5456DD8C2844E57AE6A07589AF062AF3BE9D227F1DBE72B3D2B433E04B3321468AE21538E85FDA04F3F9B313E174C11A"
 "XMLOps\Checkpoint-Macros.psm1","Checkpoint-Macros.psm1","EC6120B1A3C0D5CED2EC4BDF01C172C0CB2B28CF643252BC1B477B4E8A6DA0CBF1A7DEEC5C572671A47EBB51C20AE6D9200500F0FD5CDB44D22D76176000EB7D","1B94E154723234B2F6BC351B0A89FAE2B1347CE8C3D5ADBC6ACF0D1FCAE1487E94958955AD9FC627061A81813245E9A7034AADF78DE6B8E933EDA59A00CE12C7"
 "XMLOps\Clear-CiPolicy_Semantic.psm1","Clear-CiPolicy_Semantic.psm1","9259DD1D52B082DD116E74EF60C2A2C5A0218247D2C058CBAC1297F3FA6DBE0B35D9FF4D4C32BB16820FC991C4A1669F6935B09CD9CD90BA25A024ADF265ECE8","AC50272E68B7AD59A2A3301648B424527EB33DBE1C52BF571F01189C4004E40C1A3B4CB58058AE1A40B756E95D7CC4775A41A731AD5925195CB61745F29D0F02"
 "XMLOps\Close-EmptyXmlNodes_Semantic.psm1","Close-EmptyXmlNodes_Semantic.psm1","524913AB70404D4FA172AAB86DFF66DD70A1614D9D672750552AF107083040B7E3C51C89C1702D97729065686AC7D04DD63B79D7CDD5347887CA93FE2F29D383","F98605A9DE93A064F131F7B33FFBFA535117B54EF012DCFDCDF7FBF1BFADDDC828C7319634793D4FA2D43852C3323631D9BDB99F11D8A8B021BC5E97ED5E8B4A"

diff --git a/WDACConfig/Utilities/Invoke-WDACConfig.ps1 b/WDACConfig/Utilities/Invoke-WDACConfig.ps1
@@ -10,5 +10,5 @@ Import-Module -FullyQualifiedName "$ScriptFilePath\..\WDACConfig Module Files\WD
 # Assert-WDACConfigIntegrity -SaveLocally -Verbose
 
 # Converts the markdown help file to XML format for the ConvertTo-WDACPolicy cmdlet
-# New-ExternalHelp -Path "$ScriptFilePath\..\WDACConfig Module Files\Help\ConvertTo-WDACPolicy.md" -OutputPath "$ScriptFilePath\..\WDACConfig Module Files\Help\ConvertTo-WDACPolicy.xml" -Force
+# New-ExternalHelp -Path "$ScriptFilePath\..\WDACConfig Module Files\Help\ConvertTo-WDACPolicy.md" -OutputPath "$ScriptFilePath\..\WDACConfig Module Files\Help\ConvertTo-WDACPolicy.xml" -Force | Out-Null
 # Get-Help ConvertTo-WDACPolicy -Full
diff --git a/WDACConfig/Utilities/Unused Code/Argument Completers.ps1 b/WDACConfig/Utilities/Unused Code/Argument Completers.ps1
diff --git a/WDACConfig/WDACConfig Module Files/.NETAssembliesToLoad.txt b/WDACConfig/WDACConfig Module Files/.NETAssembliesToLoad.txt
@@ -3,6 +3,7 @@ System.IO
 System.Xml
 System.Linq
 System.Memory
+System.Console
 System.Xml.Linq
 System.Text.Json
 System.Management
@@ -13,10 +14,13 @@ System.Globalization
 System.Linq.Expressions
 System.Xml.ReaderWriter
 Microsoft.Win32.registry
+Microsoft.Win32.Primitives
 System.Diagnostics.Process
+System.Diagnostics.EventLog
 System.Security.Cryptography
 System.Management.Automation
 System.Collections.NonGeneric
+System.Text.RegularExpressions
 System.Runtime.InteropServices
 System.Windows.Forms.Primitives
 System.ComponentModel.Primitives