Update module/Samy.Offboard.ps1
This commit is contained in:
@@ -1,131 +0,0 @@
|
||||
# Samy.Offboard.ps1
|
||||
# Offboarding handlers and full offboard flow
|
||||
|
||||
function Invoke-UninstallCyberQP {
|
||||
param($Context)
|
||||
|
||||
try {
|
||||
if (Get-Command Uninstall-CyberQP -ErrorAction Stop) {
|
||||
Uninstall-CyberQP
|
||||
Write-LogHybrid "CyberQP uninstalled" Success OffBoard -LogToEvent
|
||||
Send-Text $Context "CyberQP uninstalled."
|
||||
}
|
||||
else {
|
||||
throw "Uninstall-CyberQP cmdlet not found in SVSMSP toolkit."
|
||||
}
|
||||
}
|
||||
catch {
|
||||
Write-LogHybrid "Error uninstalling CyberQP: $($_.Exception.Message)" Error OffBoard -LogToEvent
|
||||
Send-Text $Context "ERROR: $($_.Exception.Message)"
|
||||
}
|
||||
}
|
||||
|
||||
function Invoke-UninstallHelpDesk {
|
||||
param($Context)
|
||||
|
||||
try {
|
||||
if (Get-Command Uninstall-HelpDesk -ErrorAction Stop) {
|
||||
Uninstall-HelpDesk
|
||||
Write-LogHybrid "SVS HelpDesk uninstalled" Success OffBoard -LogToEvent
|
||||
Send-Text $Context "SVS HelpDesk uninstalled."
|
||||
}
|
||||
else {
|
||||
throw "Uninstall-HelpDesk cmdlet not found in SVSMSP toolkit."
|
||||
}
|
||||
}
|
||||
catch {
|
||||
Write-LogHybrid "Error uninstalling SVS HelpDesk: $($_.Exception.Message)" Error OffBoard -LogToEvent
|
||||
Send-Text $Context "ERROR: $($_.Exception.Message)"
|
||||
}
|
||||
}
|
||||
|
||||
function Invoke-UninstallThreatLocker {
|
||||
param($Context)
|
||||
|
||||
try {
|
||||
if (Get-Command Uninstall-ThreatLocker -ErrorAction Stop) {
|
||||
Uninstall-ThreatLocker
|
||||
Write-LogHybrid "ThreatLocker uninstalled" Success OffBoard -LogToEvent
|
||||
Send-Text $Context "ThreatLocker uninstalled."
|
||||
}
|
||||
else {
|
||||
throw "Uninstall-ThreatLocker cmdlet not found in SVSMSP toolkit."
|
||||
}
|
||||
}
|
||||
catch {
|
||||
Write-LogHybrid "Error uninstalling ThreatLocker: $($_.Exception.Message)" Error OffBoard -LogToEvent
|
||||
Send-Text $Context "ERROR: $($_.Exception.Message)"
|
||||
}
|
||||
}
|
||||
|
||||
function Invoke-UninstallRocketCyber {
|
||||
param($Context)
|
||||
|
||||
try {
|
||||
if (Get-Command Uninstall-RocketCyber -ErrorAction Stop) {
|
||||
Uninstall-RocketCyber
|
||||
Write-LogHybrid "RocketCyber uninstalled" Success OffBoard -LogToEvent
|
||||
Send-Text $Context "RocketCyber uninstalled."
|
||||
}
|
||||
else {
|
||||
throw "Uninstall-RocketCyber cmdlet not found in SVSMSP toolkit."
|
||||
}
|
||||
}
|
||||
catch {
|
||||
Write-LogHybrid "Error uninstalling RocketCyber: $($_.Exception.Message)" Error OffBoard -LogToEvent
|
||||
Send-Text $Context "ERROR: $($_.Exception.Message)"
|
||||
}
|
||||
}
|
||||
|
||||
function Invoke-CleanupSVSMSP {
|
||||
param($Context)
|
||||
|
||||
try {
|
||||
if (Get-Command Install-SVSMSP -ErrorAction Stop) {
|
||||
Install-SVSMSP -Cleanup
|
||||
Write-LogHybrid "SVSMSP toolkit cleanup completed (module, repo, registry)." Success OffBoard -LogToEvent
|
||||
Send-Text $Context "SVSMSP toolkit cleanup completed."
|
||||
}
|
||||
else {
|
||||
throw "Install-SVSMSP function not found in current session."
|
||||
}
|
||||
}
|
||||
catch {
|
||||
Write-LogHybrid "Error cleaning up SVSMSP toolkit: $($_.Exception.Message)" Error OffBoard -LogToEvent
|
||||
Send-Text $Context "ERROR: $($_.Exception.Message)"
|
||||
}
|
||||
}
|
||||
|
||||
function Invoke-SamyFullOffboard {
|
||||
[CmdletBinding(SupportsShouldProcess = $true)]
|
||||
param()
|
||||
|
||||
$offboardTasks = $Global:SamyTasks | Where-Object Page -eq 'offboard'
|
||||
|
||||
if (-not $offboardTasks) {
|
||||
Write-LogHybrid "No offboard tasks configured." Warning OffBoard -LogToEvent
|
||||
return
|
||||
}
|
||||
|
||||
if (-not $PSCmdlet.ShouldProcess("Full off-boarding flow", "Execute every offboard task")) {
|
||||
return
|
||||
}
|
||||
|
||||
foreach ($task in $offboardTasks) {
|
||||
try {
|
||||
Write-LogHybrid "Running offboard task: $($task.Label)" Info OffBoard -LogToEvent
|
||||
|
||||
if (-not (Get-Command $task.HandlerFn -ErrorAction SilentlyContinue)) {
|
||||
Write-LogHybrid "Missing handler $($task.HandlerFn)" Error OffBoard -LogToEvent
|
||||
continue
|
||||
}
|
||||
|
||||
& $task.HandlerFn $null
|
||||
}
|
||||
catch {
|
||||
Write-LogHybrid "Offboard task $($task.Label) failed: $($_.Exception.Message)" Error OffBoard -LogToEvent
|
||||
}
|
||||
}
|
||||
|
||||
Write-LogHybrid "Headless offboarding completed" Success OffBoard -LogToEvent
|
||||
}
|
||||
Reference in New Issue
Block a user