Main.cs

using NPOI.SS.UserModel;
using NPOI.XSSF.UserModel;
using Sunny.UI;
using System;
using System.Diagnostics;
using System.Drawing;
using System.IO;
using System.Reflection;
using System.Windows.Forms;
using System.Xml;
using WHC.OrderWater.Commons;

namespace WindowsBaselineAssistant
{
    public partial class Main : UIForm
    {
        public Main()
        {
            InitializeComponent();
            LogHelper.OnError += LogHelper_OnError;
        }
        XmlNodeList xmlNodeList;
        XmlDocument xmlDocument;
        XmlElement xmlElement;
        /*static string secInfoFile = $"{Util.CurrentDirectory}config.cfg";
        static string fortifyFile = $"{Util.CurrentDirectory}fortify.cfg";*/
        static string secInfoFile = $"{Util.RoamingDirectory}config.cfg";
        static string fortifyFile = $"{Util.RoamingDirectory}fortify.cfg";
        string secInfoCmd = $"secedit /export /cfg {Util.RoamingDirectory}config.cfg";
        string fortifyCmd = $"secedit /configure /db {Util.RoamingDirectory}fortify.sdb /cfg {Util.RoamingDirectory}fortify.cfg";
        string openRegCmd = "regjump.exe {0} /accepteula";
        string suggestTip = string.Empty;
        readonly string fortifyTip = "在进行加固前，我们需要确认您已知晓该操作对您设备关键性位置进行更改的风险.\n\n" +
            "是否了解该操作的风险?";

        private void SetPassStyle(int index)
        {
            BaselineList.Rows[index].Cells[6].Style.ForeColor = Color.Green;
            BaselineList.Rows[index].Cells[7].ReadOnly = true;
            BaselineList.Rows[index].Cells[7].Style.BackColor = Color.LightGray;
        }


        private void CheckBtn_Click(object sender, EventArgs e)
        {
            try
            {
                xmlDocument = Util.ReadXml(Util.CurrentDirectory + @"\item.xml");
                if (xmlDocument == null)
                {
                    UIMessageBox.ShowError("未找到配置文件");
                    return;
                }
                if (!Directory.Exists(Util.RoamingDirectory))
                {
                    Directory.CreateDirectory(Util.RoamingDirectory);
                }
                if (File.Exists(secInfoFile))
                {
                    File.Delete(secInfoFile);
                }
                //int code = GenerateSecInfo();
                if (!Util.ExecutExternalProgram(secInfoCmd, true, ProcessWindowStyle.Hidden).Equals(0))
                {
                    UIMessageBox.ShowError("secedit信息生成失败");
                    return;
                }
                BaselineList.Rows.Clear();
                int totalCount, passCount = 0;
                double rate, ratePercent = 0;
                xmlElement = xmlDocument.DocumentElement;
                xmlNodeList = xmlElement.ChildNodes;
                foreach (XmlNode xmlNode in xmlNodeList)
                {
                    int index = BaselineList.Rows.Add();
                    /*string name = xmlNode["name"].InnerText;*/
                    BaselineList.Rows[index].Cells[0].Value = xmlNode["name"].InnerText;
                    BaselineList.Rows[index].Cells[1].Value = xmlNode["description"].InnerText;
                    BaselineList.Rows[index].Cells[4].Value = xmlNode["standard"].InnerText;
                    BaselineList.Rows[index].Cells[8].Value = "string";
                    if (Util.ContainsElement(xmlNode, "valuetype"))
                    {
                        BaselineList.Rows[index].Cells[8].Value = xmlNode["valuetype"].InnerText;
                    }
                    string queryType = xmlNode["type"].InnerText;
                    string reality = string.Empty, section = string.Empty, warning = string.Empty;
                    //string warning = string.Empty;
                    string standard = xmlNode["standard"].InnerText;
                    switch (queryType)
                    {
                        case "secedit":
                            string mark = xmlNode["mark"].InnerText;
                            (section, reality) = Util.GetResultByMark(mark);
                            BaselineList.Rows[index].Cells[2].Value = section;
                            BaselineList.Rows[index].Cells[3].Value = mark;
                            BaselineList.Rows[index].Cells[5].Value = reality;
                            break;
                        case "registry":
                            BaselineList.Rows[index].Cells[2].Value = xmlNode["registry"].InnerText;
                            BaselineList.Rows[index].Cells[3].Value = xmlNode["regitem"].InnerText;
                            reality = RegistryHelper.GetValue(xmlNode["registry"].InnerText, xmlNode["regitem"].InnerText);
                            BaselineList.Rows[index].Cells[5].Value = reality;
                            break;
                        default:
                            break;
                    }
                    string assessment = xmlNode["assessment"].InnerText;
                    if (Util.ContainsElement(xmlNode, "manual"))
                    {
                        BaselineList.Rows[index].Cells[6].Value = "手动加固";
                        BaselineList.Rows[index].Cells[7].ReadOnly = true;
                        BaselineList.Rows[index].Cells[6].Style.ForeColor = Color.Orange;
                        BaselineList.Rows[index].Cells[7].Style.BackColor = Color.Orange;
                        BaselineList.Rows[index].Cells[7].ToolTipText = "该项不支持自动加固";
                        passCount++;
                        continue;
                    }
                    if (Util.ContainsElement(xmlNode, "ignore"))
                    {
                        BaselineList.Rows[index].Cells[6].Value = "已忽略";
                        BaselineList.Rows[index].Cells[7].ReadOnly = true;
                        BaselineList.Rows[index].Cells[6].Style.ForeColor = UIColor.LayuiBlue;
                        BaselineList.Rows[index].Cells[7].Style.BackColor = UIColor.LayuiBlue;
                        BaselineList.Rows[index].Cells[7].ToolTipText = "该项配置为忽略";
                        passCount++;
                        continue;
                    }
                    BaselineList.Rows[index].Cells[6].Value = "不符合";
                    if (reality.Equals("未设置"))
                    {
                        continue;
                    }
                    switch (assessment)
                    {
                        case "fixed"://注：固定值为不符合
                            if (!reality.Equals(standard))
                            {
                                SetPassStyle(index);
                                BaselineList.Rows[index].Cells[6].Value = "符合";
                                passCount++;
                            }
                            break;
                        case "equals":
                        case "enum":
                            if (reality.Equals(standard))
                            {
                                SetPassStyle(index);
                                BaselineList.Rows[index].Cells[6].Value = "符合";
                                passCount++;
                            }
                            break;
                        case "greaternumber":

                            if (reality.ToInt() >= standard.ToInt())
                            {
                                SetPassStyle(index);
                                BaselineList.Rows[index].Cells[6].Value = "符合";
                                passCount++;
                            }
                            break;
                        case "lessnumber":
                            if (reality.ToInt() <= standard.ToInt())
                            {
                                SetPassStyle(index);
                                BaselineList.Rows[index].Cells[6].Value = "符合";
                                passCount++;
                            }
                            break;
                        case "array":
                            if (reality.Equals(standard))
                            {
                                SetPassStyle(index);
                                BaselineList.Rows[index].Cells[6].Value = "符合";
                                passCount++;
                            }
                            break;
                        default:
                            BaselineList.Rows[index].Cells[6].Value = "未定义的类型";
                            break;
                    }
                }
                //统计数据
                totalCount = xmlNodeList.Count;
                totalCountLabel.Text = totalCount.ToString();
                passCountLabel.Text = passCount.ToString();
                failCountLabel.Text = (totalCount - passCount).ToString();
                rate = Convert.ToDouble(passCount) / Convert.ToDouble(totalCount);
                ratePercent = Math.Round(rate, 2) * 100;
                if (ratePercent < 50)
                {
                    rateLabel.ForeColor = Color.Red;
                    suggestTip = "建议进行加固!";
                }
                else if (ratePercent >= 50 && ratePercent < 80)
                {
                    rateLabel.ForeColor = Color.Orange;
                    suggestTip = "建议根据业务需求进行加固!";
                }
                else
                {
                    rateLabel.ForeColor = Color.Green;
                    suggestTip = "满足基线要求,可自行判断进行加固!";
                }
                rateLabel.Text = ratePercent + $"%  {suggestTip}";
            }
            catch (Exception ex)
            {
                LogHelper.WriteLog(ex.Message.ToString(), ex);
                UIMessageBox.ShowError("检测出现异常");
            }
        }

        private void OpenSubKeyToolStripMenuItem_Click(object sender, EventArgs e)
        {
            int selectedRowIndex = BaselineList.SelectedCells[0].RowIndex;
            string cellValue = BaselineList[2, selectedRowIndex].Value.ToString();
            if (!cellValue.Contains("HKEY"))
            {
                UIMessageBox.ShowError("该项不支持打开");
                return;
            }
            if (!Util.ExecutExternalProgram(string.Format(openRegCmd, cellValue), true).Equals(0))
            {
                UIMessageBox.ShowError("打开注册表项失败");
            }
        }

        private void Main_Load(object sender, EventArgs e)
        {
            // 获取当前执行的程序集
            Assembly assembly = Assembly.GetExecutingAssembly();
            // 获取程序集的版本信息
            Version version = assembly.GetName().Version;
            this.Text += $" v{version}";
            OSLabel.Text = Util.GetOSVersion();
            foreach (string ip in Util.GetIPAddress())
            {
                IpListComboBox.Items.Add(ip);
            }
            IpListComboBox.SelectedIndex = 0;
            OSNameLabel.Text = Environment.MachineName;
            if (!Directory.Exists(Util.RoamingDirectory))
            {
                Directory.CreateDirectory(Util.RoamingDirectory);
            }
        }

        private void FortifyBtn_Click(object sender, EventArgs e)
        {
            try
            {
                if (BaselineList.RowCount.Equals(0))
                {
                    UIMessageBox.ShowWarning($"无检测数据,请检测后再尝试此操作!");
                    return;
                }
                if (!UIMessageDialog.ShowAskDialog(this, fortifyTip, UIStyle.LayuiOrange))
                {
                    return;
                }
                int fortifyCount = 0;
                if (File.Exists(fortifyFile))
                {
                    File.Delete(fortifyFile);
                }
                IniFile iniFile = new IniFile(fortifyFile);
                iniFile.Write("Version", "signature", "$CHICAGO$");
                foreach (DataGridViewRow dataGridViewRow in BaselineList.Rows)
                {
                    if (dataGridViewRow.Cells["FortifyColumn"].Value == null || !(bool)dataGridViewRow.Cells["FortifyColumn"].Value)
                    {
                        continue;
                    }
                    string fortifyItem, fortifyField, fortifyValue, fortifyValueType = string.Empty;
                    fortifyItem = dataGridViewRow.Cells["ItemColumn"].Value.ToString();
                    fortifyField = dataGridViewRow.Cells["FieldColumn"].Value.ToString();
                    fortifyValue = dataGridViewRow.Cells["StandardColumn"].Value.ToString();
                    fortifyValueType = dataGridViewRow.Cells["ValueTypeColumn"].Value.ToString();
                    if (fortifyItem.Contains("HKEY"))
                    {
                        RegistryHelper.SaveValue(fortifyItem, fortifyField, fortifyValue, fortifyValueType);
                        fortifyCount++;
                        continue;
                    }
                    //secedit加固
                    iniFile.Write(fortifyItem, fortifyField, fortifyValue);
                    iniFile.UpdateFile();
                    fortifyCount++;
                }
                int code = Util.ExecutExternalProgram(fortifyCmd, true, ProcessWindowStyle.Hidden);
                if (code != 0)
                {
                    UIMessageBox.ShowWarning($"已完成{fortifyCount}项加固操作,secedit加固出现错误.请检查%windir%\\security\\logs\\scesrv.log");
                    return;
                }
                checkAllCheckBox.Checked = false;
                UIMessageBox.ShowSuccess($"已完成{fortifyCount}项加固操作,请再次进行检测");
            }
            catch (Exception ex)
            {
                LogHelper.WriteLog(ex.Message.ToString(), ex);
                UIMessageBox.ShowError("加固出现异常");
            }
        }

        private void checkAllCheckBox_CheckedChanged(object sender, EventArgs e)
        {
            try
            {
                if (!checkAllCheckBox.Checked)
                {
                    foreach (DataGridViewRow row in BaselineList.Rows)
                    {
                        DataGridViewCell checkBoxCell = row.Cells["FortifyColumn"];
                        /*if (!checkBoxCell.ReadOnly)
                        {
                            checkBoxCell.Value = true;
                        }*/
                        checkBoxCell.Value = false;
                    }
                    return;
                }
                // 遍历 DataGridView 的所有行，并将 "CheckBoxColumn" 列的复选框设置为选中状态
                foreach (DataGridViewRow row in BaselineList.Rows)
                {
                    DataGridViewCell checkBoxCell = row.Cells["FortifyColumn"];
                    if (!checkBoxCell.ReadOnly)
                    {
                        checkBoxCell.Value = true;
                    }
                }
            }
            catch (Exception ex)
            {
                UIMessageBox.ShowError(ex.Message);
            }

        }

        [Obsolete]
        private void ReportBtn_Click(object sender, EventArgs e)
        {
            try
            {
                if (BaselineList.RowCount.Equals(0))
                {
                    UIMessageBox.ShowWarning($"无检测数据,请检测或加固后再尝试此操作!");
                    return;
                }
                // 创建一个新的 Excel 工作簿和工作表
                IWorkbook workbook = new XSSFWorkbook();
                ISheet sheet = workbook.CreateSheet("Sheet1");
                string reportFileName = $"Windows安全基线检测加固结果汇总表-{IpListComboBox.SelectedItem.ToString()}.xlsx";
                // 在表格最上面添加一行系统信息
                Report.AddSystemInfoRow(sheet, OSLabel.Text, IpListComboBox.SelectedItem.ToString(), OSNameLabel.Text);
                // 将 DataGridView 中的数据写入 Excel 表格
                Report.WriteDataGridViewToExcel(BaselineList, sheet);
                // 自动调整列宽
                Report.AutoSizeColumns(sheet);
                // 保存 Excel 文件
                using (FileStream fs = new FileStream(reportFileName, FileMode.Create, FileAccess.Write))
                {
                    workbook.Write(fs);
                    UIMessageBox.ShowSuccess($"导出成功！\n结果已保存到\"{reportFileName}\"");
                }
            }
            catch (Exception ex)
            {
                LogHelper.WriteLog(ex.Message.ToString(), ex);
                UIMessageBox.ShowError("导出出现异常");
            }

        }

        private void showValueTypeuiCheckBox_CheckedChanged(object sender, EventArgs e)
        {
            if (!showValueTypeuiCheckBox.Checked)
            {
                BaselineList.Columns[8].Visible = false;
                return;
            }
            BaselineList.Columns[8].Visible = true;
        }

        private void AddRulebtn_Click(object sender, EventArgs e)
        {
            AddRule addRule = new AddRule();
            addRule.ShowDialog();
        }

        private void Logbtn_Click(object sender, EventArgs e)
        {
            // 启动资源管理器并打开该文件夹
            Process.Start("explorer.exe", Util.RoamingDirectory);
            Logbtn.ShowTips = false;
        }
        private void LogHelper_OnError()
        {
            Invoke(new Action(() =>
            {
                Logbtn.ShowTips = true;
            }));
        }

        private void BlogAvatar_Click(object sender, EventArgs e)
        {
            Process.Start(new ProcessStartInfo
            {
                FileName = "https://saferoad.cc/",
                UseShellExecute = true
            });
        }

        private void RepoAvatar_Click(object sender, EventArgs e)
        {
            Process.Start(new ProcessStartInfo
            {
                FileName = "https://github.com/DeEpinGh0st/WindowsBaselineAssistant",
                UseShellExecute = true
            });
        }
    }
}