Merge development branch into current branch

T0pCyber · Dec 15, 2024 · bf0544e · bf0544e
1 parent 437b481
commit bf0544e
Showing 1 changed file with 33 additions and 34 deletions.
diff --git a/Hawk/functions/Tenant/Start-HawkTenantInvestigation.ps1 b/Hawk/functions/Tenant/Start-HawkTenantInvestigation.ps1
@@ -51,10 +51,10 @@
 		Get-HawkTenantEDiscoveryConfiguration
 	}
 
-	# if ($PSCmdlet.ShouldProcess("Exchange Audit Log", "Search audit logs")) {
-	# 	Out-LogFile "Running Search-HawkTenantEXOAuditLog" -action
-	# 	Search-HawkTenantEXOAuditLog
-	# }
+	if ($PSCmdlet.ShouldProcess("Exchange Audit Log", "Search audit logs")) {
+		Out-LogFile "Running Search-HawkTenantEXOAuditLog" -action
+		Search-HawkTenantEXOAuditLog
+	}
 
 	if ($PSCmdlet.ShouldProcess("Inbox Rule History Audit Log", "Search Inbox Rule History Audit Log")) {
 		Out-LogFile "Running Get-HawkTenantInboxRuleHistory" -action
@@ -65,45 +65,44 @@
 		Out-LogFile "Running Get-HawkTenantEDiscoveryLogs" -action
 		Get-HawkTenantEDiscoveryLogs
 	}
-}
 
-	# if ($PSCmdlet.ShouldProcess("Domain Activity", "Get domain activity")) {
-	# 	Out-LogFile "Running Get-HawkTenantDomainActivity" -action
-	# 	Get-HawkTenantDomainActivity
-	# }
+	if ($PSCmdlet.ShouldProcess("Domain Activity", "Get domain activity")) {
+		Out-LogFile "Running Get-HawkTenantDomainActivity" -action
+		Get-HawkTenantDomainActivity
+	}
 
-	# if ($PSCmdlet.ShouldProcess("RBAC Changes", "Get RBAC changes")) {
-	# 	Out-LogFile "Running Get-HawkTenantRBACChange" -action
-	# 	Get-HawkTenantRBACChange
-	# }
+	if ($PSCmdlet.ShouldProcess("RBAC Changes", "Get RBAC changes")) {
+		Out-LogFile "Running Get-HawkTenantRBACChange" -action
+		Get-HawkTenantRBACChange
+	}
 
-	# if ($PSCmdlet.ShouldProcess("Azure App Audit Log", "Get app audit logs")) {
-	# 	Out-LogFile "Running Get-HawkTenantAzureAppAuditLog" -action
-	# 	Get-HawkTenantAzureAppAuditLog
-	# }
+	if ($PSCmdlet.ShouldProcess("Azure App Audit Log", "Get app audit logs")) {
+		Out-LogFile "Running Get-HawkTenantAzureAppAuditLog" -action
+		Get-HawkTenantAzureAppAuditLog
+	}
 
-	# if ($PSCmdlet.ShouldProcess("Exchange Admins", "Get Exchange admin list")) {
-	# 	Out-LogFile "Running Get-HawkTenantEXOAdmins" -action
-	# 	Get-HawkTenantEXOAdmins
-	# }
+	if ($PSCmdlet.ShouldProcess("Exchange Admins", "Get Exchange admin list")) {
+		Out-LogFile "Running Get-HawkTenantEXOAdmins" -action
+		Get-HawkTenantEXOAdmins
+	}
 
-	# if ($PSCmdlet.ShouldProcess("Consent Grants", "Get consent grants")) {
-	# 	Out-LogFile "Running Get-HawkTenantConsentGrants" -action
-	# 	Get-HawkTenantConsentGrants
-	# }
+	if ($PSCmdlet.ShouldProcess("Consent Grants", "Get consent grants")) {
+		Out-LogFile "Running Get-HawkTenantConsentGrants" -action
+		Get-HawkTenantConsentGrants
+	}
 
 	if ($PSCmdlet.ShouldProcess("Azure Admins", "Get Entra ID admin list")) {
 		Out-LogFile "Running Get-HawkTenantEntraIDAdmin" -action
 		Get-HawkTenantEntraIDAdmin
 	}
 
-	# if ($PSCmdlet.ShouldProcess("App and SPN Credentials", "Get credential details")) {
-	# 	Out-LogFile "Running Get-HawkTenantAppAndSPNCredentialDetails" -action
-	# 	Get-HawkTenantAppAndSPNCredentialDetails
-	# }
+	if ($PSCmdlet.ShouldProcess("App and SPN Credentials", "Get credential details")) {
+		Out-LogFile "Running Get-HawkTenantAppAndSPNCredentialDetails" -action
+		Get-HawkTenantAppAndSPNCredentialDetails
+	}
 
-	# if ($PSCmdlet.ShouldProcess("Azure AD Users", "Get Azure AD user list")) {
-	# 	Out-LogFile "Running Get-HawkTenantAzureADUsers" -action
-	# 	Get-HawkTenantAzureADUsers
-	# }
-# }
+	if ($PSCmdlet.ShouldProcess("Azure AD Users", "Get Azure AD user list")) {
+		Out-LogFile "Running Get-HawkTenantAzureADUsers" -action
+		Get-HawkTenantAzureADUsers
+	}
+}