Project Log 0: Automating Azure Security Reports With AZSK, NodeJS and PS

Import-Module -Name AZSK
connect-AzAccount

$sub = (Get-AzSubscription | Out-GridView -PassThru).id
[string]$sub

Get-AzSKAzureServicesSecurityStatus -SubscriptionId $sub  

$ReportFile = (Get-ChildItem -Path "$env:USERPROFILE\AppData\Local\Microsoft\AzSKLogs\" -Recurse | where {$_.FullName -match "CSV" -and $_.FullName -match "GRS" -and $_.FullName -notmatch "unsupported" -and $_.FullName -notmatch "Consolidated"}| Sort-Object -Property LastWriteTime -Descending | select -first 1).FullName

if (!$ReportFile) { Write-Host "no report file" -ForegroundColor red;Exit 0}
Write-Host "`nReport file path:`n$ReportFile" -ForegroundColor Green
$ReportCsv = Import-Csv $ReportFile
$GroupedList = $ReportCsv | Group-Object ControlID,Status,FeatureName,ControlSeverity,Description,Recommendation



# Consolidate

$Report = @()

ForEach ($Result in $GroupedList)
{
    $PSObject = New-Object PSObject -Property @{
        ControlID = $Result.Group[0].ControlId
        Status = $Result.Group[0].Status
        FeatureName = $Result.Group[0].FeatureName
        ResourceName = $Result.Group.ResourceName
        ControlSeverity = $Result.Group[0].ControlSeverity
        Description = $Result.Group[0].Description
        Recommendation = $Result.Group[0].Recommendation
    
    }

    $Report += $PSObject
}

$items = $Report.featurename | select -Unique
    foreach ($service in $items) {

    $sd = $report  | where {$_.FeatureName -match $service }| sort-object -Property ControlSeverity | select controlid,*name*,reco*,*ControlSeverity*,status, *description* | ConvertTo-Json -Depth 2

    $export = 
    'var data =' + $sd + 
    '
    module.exports={data}'
    mkdir .\md\ -force -confirm:$false
    
    $export | Out-File .\md\export.js -Encoding utf8

        node.exe .\azsk.js; start-sleep -Milliseconds 300
        
}
#

const fs = require('fs')
var chalk = require('chalk')
var {render} = require('mustache')

var {data} = require(__dirname + '/md/export')
var {getRationale} = require(__dirname + '/helpers')
var {template,topHeaders} = require('./template')

async function genRep () {
     
//
                for (let index = 0; index < data.length; index++) {
                     
                     const scannedItem = data[index]    
                     let {FeatureName,ControlID} = scannedItem
              
                     
                     if (index == 0) {
                            var createHeaders = render(topHeaders,scannedItem)
                            var addToexisting = true

                            try {fs.readFileSync(`${__dirname}\\md\\`+`00-results.md`) } catch {
                                   console.log('creating new report file')
                                   fs.writeFileSync(`${__dirname}\\md\\`+`00-results.md`,createHeaders)   
                                   addToexisting = false
                                   console.log(addToexisting)
                            } 
                            
                            if (addToexisting == true) {
                                   console.log('appending to existing report')
                                   fs.appendFileSync(`${__dirname}\\md\\`+`00-results.md`,createHeaders)}

                            fs.writeFileSync(`${__dirname}\\md\\`+`00-results-${FeatureName}.md`,createHeaders)

                            }
                     var rationale =  await getRationale (FeatureName,ControlID)

                     scannedItem.rationale = rationale
                     //console.log(data[index].FeatureName)

                     //console.log(scannedItem)
                     var output = render(template,scannedItem)
                     console.log(chalk.bold.yellowBright.bgGrey.bold(`creating report for${FeatureName}`,chalk.green.bgBlack(` ControlID: ${scannedItem.ControlID}`)))

                     fs.writeFileSync(`${__dirname}\\md\\` + `${scannedItem.ControlID}.md`, output)
                     fs.appendFileSync(`${__dirname}\\md\\`+`00-results-${FeatureName}.md`,output)
                     fs.appendFileSync(`${__dirname}\\md\\`+`00-results.md`,output)
                
                }

}

genRep() 

function stylizeContent (content,color,font,tags) {
    if (tags) { 
    return `${tags.split(',')[0]}<span style= "font-family: ${font}; color: ${color}">${content}</span> ${tags.split(',')[1]}
    `
    } else {
        return `<span style= "font-family: ${font}; color: ${color}">${content}</span> <br>
       `
    }
}

//let rationale = stylizeContent(' **Rationale**: {{rationale}}','black', 'Arial')
let ControlID = stylizeContent('{{ControlID}}','#0089cf', 'Arial',"<H4>,</H4>")
//console.log(rationale)
let Status = stylizeContent('**Status** {{Status}}','black', 'Arial',)
let Severity = stylizeContent('**Severity** {{ControlSeverity}}','black', 'Arial',)
let Recommendation = stylizeContent('**Recommendation** {{Recommendation}}','black', 'Arial',)
let Rationale = stylizeContent('**Rationale:** {{rationale}}','black', 'Arial',)
let Resources = stylizeContent(`**Resources**:{{#ResourceName}} <br> {{.}} {{/ResourceName}}`,'black', 'Arial',)
let Description = stylizeContent('**Description** {{Description}}','black', 'Arial',)

let template = `
${ControlID}
${Status}
${Severity}
${Recommendation}
${Rationale}
${Description}
${Resources}

`

let FeatureName = stylizeContent('{{FeatureName }}','#0089cf', 'Arial',"<H2>,</H2>")
let FeatureDescription = stylizeContent('This section describes the top recommendations and detailed audit findings on {{FeatureName}} resources.','black', 'Arial')
let TopRecommendations = stylizeContent('Top Recommendations','#0089cf', 'Arial',"<H3>,</H3>")
let TopControls = stylizeContent('Controls','#0089cf', 'Arial',"<H3>,</H3>")

let topHeaders = `
${FeatureName}
${FeatureDescription}
${TopRecommendations}
${TopControls}
`

module.exports={template,topHeaders}