ps/Story Files/carbon_finder.ps1

458 lines
12 KiB
PowerShell
Raw Permalink Normal View History

2023-05-30 22:55:40 -07:00
$carbonFuncs = @( "Add-CGroupMember",
"Add-CIisDefaultDocument",
"Add-CTrustedHost",
"Add-GroupMember",
"Add-GroupMembers",
"Add-IisDefaultDocument",
"Add-TrustedHost",
"Add-TrustedHosts",
"Assert-AdminPrivilege",
"Assert-AdminPrivileges",
"Assert-CAdminPrivilege",
"Assert-CFirewallConfigurable",
"Assert-CService",
"Assert-FirewallConfigurable",
"Assert-Service",
"Clear-CDscLocalResourceCache",
"Clear-CMofAuthoringMetadata",
"Clear-CTrustedHost",
"Clear-DscLocalResourceCache",
"Clear-MofAuthoringMetadata",
"Clear-TrustedHost",
"Clear-TrustedHosts",
"Complete-CJob",
"Complete-Job",
"Complete-Jobs",
"Compress-CItem",
"Compress-Item",
"Convert-CSecureStringToString",
"Convert-CXmlFile",
"Convert-SecureStringToString",
"Convert-XmlFile",
"ConvertFrom-Base64",
"ConvertFrom-CBase64",
"ConvertTo-Base64",
"ConvertTo-CBase64",
"ConvertTo-CContainerInheritanceFlags",
"ConvertTo-CInheritanceFlag",
"ConvertTo-CPropagationFlag",
"ConvertTo-CSecurityIdentifier",
"ConvertTo-ContainerInheritanceFlags",
"ConvertTo-FullPath",
"ConvertTo-InheritanceFlag",
"ConvertTo-InheritanceFlags",
"ConvertTo-PropagationFlag",
"ConvertTo-PropagationFlags",
"ConvertTo-SecurityIdentifier",
"Copy-CDscResource",
"Copy-DscResource",
"Disable-AclInheritance",
"Disable-CAclInheritance",
"Disable-CFirewallStatefulFtp",
"Disable-CIEEnhancedSecurityConfiguration",
"Disable-CIisSecurityAuthentication",
"Disable-CNtfsCompression",
"Disable-FirewallStatefulFtp",
"Disable-IEEnhancedSecurityConfiguration",
"Disable-IisSecurityAuthentication",
"Disable-NtfsCompression",
"Enable-AclInheritance",
"Enable-CAclInheritance",
"Enable-CFirewallStatefulFtp",
"Enable-CIEActivationPermission",
"Enable-CIisDirectoryBrowsing",
"Enable-CIisSecurityAuthentication",
"Enable-CIisSsl",
"Enable-CNtfsCompression",
"Enable-FirewallStatefulFtp",
"Enable-IEActivationPermission",
"Enable-IEActivationPermissions",
"Enable-IisDirectoryBrowsing",
"Enable-IisSecurityAuthentication",
"Enable-IisSsl",
"Enable-NtfsCompression",
"Expand-CItem",
"Expand-Item",
"Find-ADUser",
"Find-CADUser",
"Format-ADSearchFilterValue",
"Format-ADSpecialCharacters",
"Format-CADSearchFilterValue",
"Get-ADDomainController",
"Get-CADDomainController",
"Get-CCertificate",
"Get-CCertificateStore",
"Get-CComPermission",
"Get-CComSecurityDescriptor",
"Get-CDscError",
"Get-CDscWinEvent",
"Get-CFileShare",
"Get-CFileSharePermission",
"Get-CFirewallRule",
"Get-CGroup",
"Get-CHttpUrlAcl",
"Get-CIPAddress",
"Get-CIisAppPool",
"Get-CIisApplication",
"Get-CIisConfigurationSection",
"Get-CIisHttpHeader",
"Get-CIisHttpRedirect",
"Get-CIisMimeMap",
"Get-CIisSecurityAuthentication",
"Get-CIisVersion",
"Get-CIisWebsite",
"Get-CMsi",
"Get-CMsmqMessageQueue",
"Get-CMsmqMessageQueuePath",
"Get-CPathProvider",
"Get-CPathToHostsFile",
"Get-CPerformanceCounter",
"Get-CPermission",
"Get-CPowerShellModuleInstallPath",
"Get-CPowershellPath",
"Get-CPrivilege",
"Get-CProgramInstallInfo",
"Get-CRegistryKeyValue",
"Get-CScheduledTask",
"Get-CServiceAcl",
"Get-CServiceConfiguration",
"Get-CServicePermission",
"Get-CServiceSecurityDescriptor",
"Get-CSslCertificateBinding",
"Get-CTrustedHost",
"Get-CUser",
"Get-CWmiLocalUserAccount",
"Get-Certificate",
"Get-CertificateStore",
"Get-ComPermission",
"Get-ComPermissions",
"Get-ComSecurityDescriptor",
"Get-DscError",
"Get-DscWinEvent",
"Get-FileShare",
"Get-FileSharePermission",
"Get-FirewallRule",
"Get-FirewallRules",
"Get-Group",
"Get-HttpUrlAcl",
"Get-IPAddress",
"Get-IisAppPool",
"Get-IisApplication",
"Get-IisConfigurationSection",
"Get-IisHttpHeader",
"Get-IisHttpRedirect",
"Get-IisMimeMap",
"Get-IisSecurityAuthentication",
"Get-IisVersion",
"Get-IisWebsite",
"Get-Msi",
"Get-MsmqMessageQueue",
"Get-MsmqMessageQueuePath",
"Get-PathCanonicalCase",
"Get-PathProvider",
"Get-PathToHostsFile",
"Get-PerformanceCounter",
"Get-PerformanceCounters",
"Get-Permission",
"Get-Permissions",
"Get-PowerShellModuleInstallPath",
"Get-PowershellPath",
"Get-Privilege",
"Get-Privileges",
"Get-ProgramInstallInfo",
"Get-RegistryKeyValue",
"Get-ScheduledTask",
"Get-ServiceAcl",
"Get-ServiceConfiguration",
"Get-ServicePermission",
"Get-ServicePermissions",
"Get-ServiceSecurityDescriptor",
"Get-SslCertificateBinding",
"Get-SslCertificateBindings",
"Get-TrustedHost",
"Get-TrustedHosts",
"Get-User",
"Get-WmiLocalUserAccount",
"Grant-CComPermission",
"Grant-CHttpUrlPermission",
"Grant-CMsmqMessageQueuePermission",
"Grant-CPermission",
"Grant-CPrivilege",
"Grant-CServiceControlPermission",
"Grant-CServicePermission",
"Grant-ComPermission",
"Grant-ComPermissions",
"Grant-HttpUrlPermission",
"Grant-MsmqMessageQueuePermission",
"Grant-MsmqMessageQueuePermissions",
"Grant-Permission",
"Grant-Permissions",
"Grant-Privilege",
"Grant-ServiceControlPermission",
"Grant-ServicePermission",
"Initialize-CLcm",
"Initialize-Lcm",
"Install-CCertificate",
"Install-CDirectory",
"Install-CFileShare",
"Install-CGroup",
"Install-CIisAppPool",
"Install-CIisApplication",
"Install-CIisVirtualDirectory",
"Install-CIisWebsite",
"Install-CJunction",
"Install-CMsi",
"Install-CMsmq",
"Install-CMsmqMessageQueue",
"Install-CPerformanceCounter",
"Install-CRegistryKey",
"Install-CScheduledTask",
"Install-CService",
"Install-CUser",
"Install-Certificate",
"Install-Directory",
"Install-FileShare",
"Install-Group",
"Install-IisAppPool",
"Install-IisApplication",
"Install-IisVirtualDirectory",
"Install-IisWebsite",
"Install-Junction",
"Install-Msi",
"Install-Msmq",
"Install-MsmqMessageQueue",
"Install-PerformanceCounter",
"Install-RegistryKey",
"Install-ScheduledTask",
"Install-Service",
"Install-SmbShare",
"Install-User",
"Invoke-AppCmd",
"Invoke-CAppCmd",
"Invoke-CPowerShell",
"Invoke-PowerShell",
"Invoke-WindowsInstaller",
"Join-CIisVirtualPath",
"Join-IisVirtualPath",
"Lock-CIisConfigurationSection",
"Lock-IisConfigurationSection",
"New-CCredential",
"New-CJunction",
"New-CRsaKeyPair",
"New-CTempDirectory",
"New-Credential",
"New-Junction",
"New-RsaKeyPair",
"New-TempDir",
"New-TempDirectory",
"Protect-Acl",
"Protect-CString",
"Protect-String",
"Read-CFile",
"Read-File",
"Remove-CDotNetAppSetting",
"Remove-CEnvironmentVariable",
"Remove-CGroupMember",
"Remove-CHostsEntry",
"Remove-CIisMimeMap",
"Remove-CIniEntry",
"Remove-CJunction",
"Remove-CRegistryKeyValue",
"Remove-CSslCertificateBinding",
"Remove-Certificate",
"Remove-DotNetAppSetting",
"Remove-EnvironmentVariable",
"Remove-GroupMember",
"Remove-HostsEntry",
"Remove-IisMimeMap",
"Remove-IisWebsite",
"Remove-IniEntry",
"Remove-Junction",
"Remove-MsmqMessageQueue",
"Remove-RegistryKeyValue",
"Remove-Service",
"Remove-SslCertificateBinding",
"Remove-User",
"Reset-CHostsFile",
"Reset-CMsmqQueueManagerID",
"Reset-HostsFile",
"Reset-MsmqQueueManagerID",
"Resolve-CFullPath",
"Resolve-CIdentity",
"Resolve-CIdentityName",
"Resolve-CNetPath",
"Resolve-CPathCase",
"Resolve-CRelativePath",
"Resolve-FullPath",
"Resolve-Identity",
"Resolve-IdentityName",
"Resolve-NetPath",
"Resolve-PathCase",
"Resolve-RelativePath",
"Restart-CRemoteService",
"Restart-RemoteService",
"Revoke-CComPermission",
"Revoke-CHttpUrlPermission",
"Revoke-CPermission",
"Revoke-CPrivilege",
"Revoke-CServicePermission",
"Revoke-ComPermission",
"Revoke-ComPermissions",
"Revoke-HttpUrlPermission",
"Revoke-Permission",
"Revoke-Privilege",
"Revoke-ServicePermission",
"Set-CDotNetAppSetting",
"Set-CDotNetConnectionString",
"Set-CEnvironmentVariable",
"Set-CHostsEntry",
"Set-CIisHttpHeader",
"Set-CIisHttpRedirect",
"Set-CIisMimeMap",
"Set-CIisWebsiteID",
"Set-CIisWebsiteSslCertificate",
"Set-CIisWindowsAuthentication",
"Set-CIniEntry",
"Set-CRegistryKeyValue",
"Set-CServiceAcl",
"Set-CSslCertificateBinding",
"Set-CTrustedHost",
"Set-DotNetAppSetting",
"Set-DotNetConnectionString",
"Set-EnvironmentVariable",
"Set-HostsEntry",
"Set-IisHttpHeader",
"Set-IisHttpRedirect",
"Set-IisMimeMap",
"Set-IisWebsiteID",
"Set-IisWebsiteSslCertificate",
"Set-IisWindowsAuthentication",
"Set-IniEntry",
"Set-RegistryKeyValue",
"Set-ServiceAcl",
"Set-SslCertificateBinding",
"Set-TrustedHost",
"Set-TrustedHosts",
"Split-CIni",
"Split-Ini",
"Start-CDscPullConfiguration",
"Start-DscPullConfiguration",
"Test-AdminPrivilege",
"Test-AdminPrivileges",
"Test-CAdminPrivilege",
"Test-CDotNet",
"Test-CDscTargetResource",
"Test-CFileShare",
"Test-CFirewallStatefulFtp",
"Test-CGroup",
"Test-CGroupMember",
"Test-CIPAddress",
"Test-CIdentity",
"Test-CIisAppPool",
"Test-CIisConfigurationSection",
"Test-CIisSecurityAuthentication",
"Test-CIisWebsite",
"Test-CMsmqMessageQueue",
"Test-CNtfsCompression",
"Test-COSIs32Bit",
"Test-COSIs64Bit",
"Test-CPathIsJunction",
"Test-CPerformanceCounter",
"Test-CPerformanceCounterCategory",
"Test-CPermission",
"Test-CPowerShellIs32Bit",
"Test-CPowerShellIs64Bit",
"Test-CPrivilege",
"Test-CRegistryKeyValue",
"Test-CScheduledTask",
"Test-CService",
"Test-CSslCertificateBinding",
"Test-CTypeDataMember",
"Test-CUncPath",
"Test-CUser",
"Test-CWindowsFeature",
"Test-CZipFile",
"Test-DotNet",
"Test-DscTargetResource",
"Test-FileShare",
"Test-FirewallStatefulFtp",
"Test-Group",
"Test-GroupMember",
"Test-IPAddress",
"Test-Identity",
"Test-IisAppPool",
"Test-IisAppPoolExists",
"Test-IisConfigurationSection",
"Test-IisSecurityAuthentication",
"Test-IisWebsite",
"Test-IisWebsiteExists",
"Test-MsmqMessageQueue",
"Test-NtfsCompression",
"Test-OSIs32Bit",
"Test-OSIs64Bit",
"Test-PathIsJunction",
"Test-PerformanceCounter",
"Test-PerformanceCounterCategory",
"Test-Permission",
"Test-PowerShellIs32Bit",
"Test-PowerShellIs64Bit",
"Test-Privilege",
"Test-RegistryKeyValue",
"Test-ScheduledTask",
"Test-Service",
"Test-SslCertificateBinding",
"Test-TypeDataMember",
"Test-UncPath",
"Test-User",
"Test-WindowsFeature",
"Test-ZipFile",
"Uninstall-CCertificate",
"Uninstall-CDirectory",
"Uninstall-CFileShare",
"Uninstall-CGroup",
"Uninstall-CIisAppPool",
"Uninstall-CIisWebsite",
"Uninstall-CJunction",
"Uninstall-CMsmqMessageQueue",
"Uninstall-CPerformanceCounterCategory",
"Uninstall-CScheduledTask",
"Uninstall-CService",
"Uninstall-CUser",
"Uninstall-Certificate",
"Uninstall-Directory",
"Uninstall-FileShare",
"Uninstall-Group",
"Uninstall-IisAppPool",
"Uninstall-IisWebsite",
"Uninstall-Junction",
"Uninstall-MsmqMessageQueue",
"Uninstall-PerformanceCounterCategory",
"Uninstall-ScheduledTask",
"Uninstall-Service",
"Uninstall-User",
"Unlock-CIisConfigurationSection",
"Unlock-IisConfigurationSection",
"Unprotect-AclAccessRules",
"Unprotect-CString",
"Unprotect-String",
"Write-CDscError",
"Write-CFile",
"Write-DscError",
"Write-File" )
#$allPSM1s = Get-ChildItem "D:/alkami.powershell/modules/" -Filter "*.psm1" -Recurse
$allPSM1s = Get-ChildItem "D:/" -Filter "*.ps1" -Recurse
foreach ($psm1 in $allPSM1s) {
foreach ($line in (get-content $psm1.FullName)) {
foreach ($carbonFunc in $carbonFuncs) {
if ($line -like "## Function from *") {
Continue
}
if ($line -like "*$carbonFunc*") {
Write-Host "$carbonFunc : $($psm1.FullName) : $line"
} else {
# write-host "." -nonewline
}
}
}
}