update

2026-04-15 15:45:50 -05:00
commit 1d304511b8
613 changed files with 140998 additions and 0 deletions
@@ -0,0 +1,63 @@
+<#
+.SYNOPSIS
+    A short one-line action-based description, e.g. 'Tests if a function is valid'
+.DESCRIPTION
+    A longer description of the function, its purpose, common use cases, etc.
+.NOTES
+    Information or caveats about the function e.g. 'This function is not supported in Linux'
+.LINK
+    Specify a URI to a help page, this will show when Get-Help -Online is used.
+.EXAMPLE
+    Test-MyTestFunction -Verbose
+    Explanation of the function or its result. You can include multiple examples with additional .EXAMPLE lines
+#>
+
+function Get-ITDVMwareVMHardening {
+    [CmdletBinding()]
+    param(
+        [string]
+        $Name
+    )
+    Begin {
+
+    }
+    Process {
+        $SettingName = @(
+            "tools.setInfo.sizeLimit",
+            "isolation.device.edit.disable",
+            "isolation.device.connectable.disable",
+            "isolation.tools.copy.disable",
+            "isolation.tools.dnd.disable",
+            "isolation.tools.setGUIOptions.enable",
+            "isolation.tools.paste.disable",
+            "isolation.tools.diskShrink.disable",
+            "isolation.tools.diskWiper.disable",
+            "log.keepOld",
+            "log.rotateSize"
+        )
+        $Result = [System.Collections.ArrayList]@()
+        ForEach ($n in $Name) {
+            $VM = Get-VM -Name $n | Where-Object { $_.ExtensionData.Summary.Config.ManagedBy.Type -ne "placeholderVm" }
+            $GetAdvSetting = Get-AdvancedSetting -Entity $VM -Name $SettingName | select Entity, Name, Value
+            $obj = [PSCustomObject]@{
+                'Entity'                               = $VM.Name
+                'Uid'                                  = $VM.Uid.split('@')[1].split(':')[0]
+                "tools.setInfo.sizeLimit"              = ($GetAdvSetting | Where-Object Name -EQ 'tools.setInfo.sizeLimit').Value
+                "isolation.device.edit.disable"        = ($GetAdvSetting | Where-Object Name -EQ 'isolation.device.edit.disable').Value
+                "isolation.device.connectable.disable" = ($GetAdvSetting | Where-Object Name -EQ 'isolation.device.connectable.disable').Value
+                "isolation.tools.copy.disable"         = ($GetAdvSetting | Where-Object Name -EQ 'isolation.tools.copy.disable').Value
+                "isolation.tools.dnd.disable"          = ($GetAdvSetting | Where-Object Name -EQ 'isolation.tools.dnd.disable').Value
+                "isolation.tools.setGUIOptions.enable" = ($GetAdvSetting | Where-Object Name -EQ 'isolation.tools.setGUIOptions.enable').Value
+                "isolation.tools.paste.disable"        = ($GetAdvSetting | Where-Object Name -EQ 'isolation.tools.paste.disable').Value
+                "isolation.tools.diskShrink.disable"   = ($GetAdvSetting | Where-Object Name -EQ 'isolation.tools.diskShrink.disable').Value
+                "isolation.tools.diskWiper.disable"    = ($GetAdvSetting | Where-Object Name -EQ 'isolation.tools.diskWiper.disable').Value
+                "log.keepOld"                          = ($GetAdvSetting | Where-Object Name -EQ 'log.keepOld').Value
+                "log.rotateSize"                       = ($GetAdvSetting | Where-Object Name -EQ 'log.rotateSize').Value
+            }
+            $Result.Add($obj)
+        }
+    }
+    End {
+        Write-Output $Result
+    }
+}