Compare commits
5 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 3a5cccbf62 | |||
| d880ebeedb | |||
| aacd8e0293 | |||
| dce789db94 | |||
| cedf28199e |
@@ -1,9 +1,8 @@
|
|||||||
{
|
{
|
||||||
"permissions": {
|
"permissions": {
|
||||||
"allow": [
|
"allow": [
|
||||||
"Bash(dotnet build:*)",
|
"Bash(\"BuildDir\\bin\\Debug\\Assets\\osqueryi.exe\" --json \"SELECT datetime((SELECT CAST(unix_time AS INTEGER) FROM time) - total_seconds, ''unixepoch'') as boot_time FROM uptime;\")",
|
||||||
"Bash(git add:*)",
|
"Bash(git describe:*)"
|
||||||
"Bash(git commit -m \"$(cat <<''EOF''\nRelease v1.2.0: Integrate osquery for enhanced system information\n\nMajor Features:\n- Integrated osquery for comprehensive system information gathering\n- Added OsqueryService for executing SQL queries against system tables\n- Implemented Osquery Console tab for interactive SQL queries\n\nSystem Info Improvements:\n- Enhanced system info collection using osquery tables\n- Added support for multiple GPU detection\n- Improved memory detection with proper GB formatting\n- Fixed OS Architecture detection (x64/x86)\n- Better network interface detection (IPv4 only)\n- Human-readable timestamp formatting\n\nUI/UX Enhancements:\n- Added window resizing with corner drag support\n- Implemented dynamic window sizing (SizeToContent)\n- Added ScrollViewer for content overflow\n- Improved IP address formatting with bullet points\n- Added field labels to all system info displays\n- Set minimum/maximum window size constraints\n\nBug Fixes:\n- Fixed XAML StackPanel Spacing property issue\n- Merged duplicate MainWindow constructors\n- Fixed non-nullable field warnings\n- Fixed EventHandler nullability signatures\n- Removed redundant hostname/OS name fields\n- Fixed GPU registry query to detect all GPUs\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>\nEOF\n)\")"
|
|
||||||
],
|
],
|
||||||
"deny": [],
|
"deny": [],
|
||||||
"ask": []
|
"ask": []
|
||||||
|
|||||||
@@ -41,5 +41,7 @@
|
|||||||
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
|
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
|
||||||
<PrivateAssets>all</PrivateAssets>
|
<PrivateAssets>all</PrivateAssets>
|
||||||
</PackageVersion>
|
</PackageVersion>
|
||||||
|
<PackageVersion Include="System.ServiceProcess.ServiceController" Version="9.0.3" />
|
||||||
|
<PackageVersion Include="Microsoft.Extensions.Hosting.WindowsServices" Version="9.0.3" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
</Project>
|
</Project>
|
||||||
@@ -16,18 +16,47 @@ public partial class App : Application
|
|||||||
[STAThread]
|
[STAThread]
|
||||||
private static void Main(string[] args)
|
private static void Main(string[] args)
|
||||||
{
|
{
|
||||||
MainAsync(args).GetAwaiter().GetResult();
|
// Show splash screen with fade-in effect
|
||||||
|
var splash = new SplashScreen("Assets/splash.png");
|
||||||
|
splash.Show(false, true); // autoClose=false, topMost=true
|
||||||
|
|
||||||
|
// Allow 1 second for fade-in to complete
|
||||||
|
System.Threading.Thread.Sleep(1000);
|
||||||
|
|
||||||
|
MainAsync(args, splash).GetAwaiter().GetResult();
|
||||||
}
|
}
|
||||||
|
|
||||||
private static async Task MainAsync(string[] args)
|
private static async Task MainAsync(string[] args, SplashScreen splash)
|
||||||
{
|
{
|
||||||
using IHost host = CreateHostBuilder(args).Build();
|
using IHost host = CreateHostBuilder(args).Build();
|
||||||
await host.StartAsync().ConfigureAwait(true);
|
await host.StartAsync().ConfigureAwait(true);
|
||||||
|
|
||||||
App app = new();
|
App app = new();
|
||||||
app.InitializeComponent();
|
app.InitializeComponent();
|
||||||
app.MainWindow = host.Services.GetRequiredService<MainWindow>();
|
|
||||||
app.MainWindow.Visibility = Visibility.Visible;
|
var mainWindow = host.Services.GetRequiredService<MainWindow>();
|
||||||
|
app.MainWindow = mainWindow;
|
||||||
|
|
||||||
|
// Keep MainWindow hidden until system info loads
|
||||||
|
mainWindow.Visibility = Visibility.Hidden;
|
||||||
|
|
||||||
|
// When system info finishes loading, show MainWindow and close splash
|
||||||
|
mainWindow.SystemInfoLoaded += (s, e) =>
|
||||||
|
{
|
||||||
|
// Use dispatcher to handle UI thread timing
|
||||||
|
mainWindow.Dispatcher.BeginInvoke(async () =>
|
||||||
|
{
|
||||||
|
// Wait 1 second before starting fade-out
|
||||||
|
await Task.Delay(1000);
|
||||||
|
|
||||||
|
// Show the main window
|
||||||
|
mainWindow.Visibility = Visibility.Visible;
|
||||||
|
|
||||||
|
// Close splash with fade-out effect (1 second)
|
||||||
|
splash.Close(TimeSpan.FromMilliseconds(1000));
|
||||||
|
});
|
||||||
|
};
|
||||||
|
|
||||||
app.Run();
|
app.Run();
|
||||||
|
|
||||||
await host.StopAsync().ConfigureAwait(true);
|
await host.StopAsync().ConfigureAwait(true);
|
||||||
|
|||||||
BIN
LD-SysInfo/Assets/splash.png
Normal file
BIN
LD-SysInfo/Assets/splash.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 113 KiB |
@@ -14,6 +14,14 @@ namespace LD_SysInfo
|
|||||||
[JsonProperty("SystemInfoInterval")] public int SystemInfoInterval { get; set; } = 60;
|
[JsonProperty("SystemInfoInterval")] public int SystemInfoInterval { get; set; } = 60;
|
||||||
[JsonProperty("ClientIdentifier")] public string ClientIdentifier { get; set; } = "your-default-client-id";
|
[JsonProperty("ClientIdentifier")] public string ClientIdentifier { get; set; } = "your-default-client-id";
|
||||||
[JsonProperty("Auth")] public AuthConfig Auth { get; set; } = new();
|
[JsonProperty("Auth")] public AuthConfig Auth { get; set; } = new();
|
||||||
|
[JsonProperty("PatchCompliance")] public PatchComplianceConfig PatchCompliance { get; set; } = new();
|
||||||
|
}
|
||||||
|
|
||||||
|
public class PatchComplianceConfig
|
||||||
|
{
|
||||||
|
[JsonProperty("Enabled")] public bool Enabled { get; set; } = false;
|
||||||
|
[JsonProperty("CheckIntervalHours")] public int CheckIntervalHours { get; set; } = 24;
|
||||||
|
[JsonProperty("LastCheckTime")] public DateTime? LastCheckTime { get; set; } = null;
|
||||||
}
|
}
|
||||||
|
|
||||||
public class AuthConfig
|
public class AuthConfig
|
||||||
|
|||||||
@@ -9,7 +9,8 @@
|
|||||||
<UseWPF>true</UseWPF>
|
<UseWPF>true</UseWPF>
|
||||||
<StartupObject>LD_SysInfo.App</StartupObject>
|
<StartupObject>LD_SysInfo.App</StartupObject>
|
||||||
<ApplicationIcon>Assets\LDShortcut.ico</ApplicationIcon>
|
<ApplicationIcon>Assets\LDShortcut.ico</ApplicationIcon>
|
||||||
<OutputPath>C:\Users\Sonder\source\repos\psg-oversight-app\BuildDir\bin\Debug\net8.0-windows\</OutputPath>
|
<OutputPath>C:\Users\Sonder\source\repos\psg-oversight-app\BuildDir\bin\Debug\</OutputPath>
|
||||||
|
<AppendTargetFrameworkToOutputPath>false</AppendTargetFrameworkToOutputPath>
|
||||||
<IncludeSatelliteAssembliesForPublish>false</IncludeSatelliteAssembliesForPublish>
|
<IncludeSatelliteAssembliesForPublish>false</IncludeSatelliteAssembliesForPublish>
|
||||||
|
|
||||||
<!-- 🔢 Version Info -->
|
<!-- 🔢 Version Info -->
|
||||||
@@ -50,11 +51,15 @@
|
|||||||
<ApplicationDefinition Remove="App.xaml" />
|
<ApplicationDefinition Remove="App.xaml" />
|
||||||
<None Remove="Assets\osqueryi.exe" />
|
<None Remove="Assets\osqueryi.exe" />
|
||||||
<None Remove="Assets\trayicon.ico" />
|
<None Remove="Assets\trayicon.ico" />
|
||||||
|
<None Remove="Assets\splash.png" />
|
||||||
<None Remove="config.json" />
|
<None Remove="config.json" />
|
||||||
<Content Include="Assets\LDShortcut.ico" />
|
<Content Include="Assets\LDShortcut.ico" />
|
||||||
<Content Include="Assets\osqueryi.exe">
|
<Content Include="Assets\osqueryi.exe">
|
||||||
<CopyToOutputDirectory>Always</CopyToOutputDirectory>
|
<CopyToOutputDirectory>Always</CopyToOutputDirectory>
|
||||||
</Content>
|
</Content>
|
||||||
|
<SplashScreen Include="Assets\splash.png">
|
||||||
|
<CopyToOutputDirectory>Always</CopyToOutputDirectory>
|
||||||
|
</SplashScreen>
|
||||||
<Page Include="App.xaml" />
|
<Page Include="App.xaml" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
|
|
||||||
@@ -67,6 +72,7 @@
|
|||||||
<PackageReference Include="Microsoft.Extensions.Hosting" />
|
<PackageReference Include="Microsoft.Extensions.Hosting" />
|
||||||
<PackageReference Include="Newtonsoft.Json" />
|
<PackageReference Include="Newtonsoft.Json" />
|
||||||
<PackageReference Include="System.Management" />
|
<PackageReference Include="System.Management" />
|
||||||
|
<PackageReference Include="System.ServiceProcess.ServiceController" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
|
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
|
|||||||
@@ -141,8 +141,41 @@
|
|||||||
</Setter>
|
</Setter>
|
||||||
</Style>
|
</Style>
|
||||||
|
|
||||||
|
<!-- 🔵 Small Rounded Button Style for Service Tab -->
|
||||||
|
<Style x:Key="SmallRoundedButtonStyle" TargetType="Button">
|
||||||
|
<Setter Property="Background" Value="{DynamicResource PrimaryBrush}"/>
|
||||||
|
<Setter Property="Foreground" Value="{DynamicResource TextLightBrush}"/>
|
||||||
|
<Setter Property="BorderBrush" Value="Transparent"/>
|
||||||
|
<Setter Property="BorderThickness" Value="0"/>
|
||||||
|
<Setter Property="FontSize" Value="14"/>
|
||||||
|
<Setter Property="Padding" Value="12,8"/>
|
||||||
|
<Setter Property="Margin" Value="4"/>
|
||||||
|
<Setter Property="Template">
|
||||||
|
<Setter.Value>
|
||||||
|
<ControlTemplate TargetType="Button">
|
||||||
|
<Border Background="{TemplateBinding Background}"
|
||||||
|
CornerRadius="8"
|
||||||
|
Padding="{TemplateBinding Padding}">
|
||||||
|
<ContentPresenter HorizontalAlignment="Center" VerticalAlignment="Center"/>
|
||||||
|
</Border>
|
||||||
|
<ControlTemplate.Triggers>
|
||||||
|
<Trigger Property="IsMouseOver" Value="True">
|
||||||
|
<Setter Property="Background" Value="{DynamicResource HoverBrush}"/>
|
||||||
|
</Trigger>
|
||||||
|
<Trigger Property="IsPressed" Value="True">
|
||||||
|
<Setter Property="Background" Value="#2E5FA8"/>
|
||||||
|
</Trigger>
|
||||||
|
<Trigger Property="IsEnabled" Value="False">
|
||||||
|
<Setter Property="Background" Value="#808080"/>
|
||||||
|
<Setter Property="Foreground" Value="#C0C0C0"/>
|
||||||
|
</Trigger>
|
||||||
|
</ControlTemplate.Triggers>
|
||||||
|
</ControlTemplate>
|
||||||
|
</Setter.Value>
|
||||||
|
</Setter>
|
||||||
|
</Style>
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<Style TargetType="TextBox">
|
<Style TargetType="TextBox">
|
||||||
<Setter Property="Foreground" Value="{DynamicResource TextDarkBrush}" />
|
<Setter Property="Foreground" Value="{DynamicResource TextDarkBrush}" />
|
||||||
<Setter Property="Background" Value="{DynamicResource PaperDarkBrush}" />
|
<Setter Property="Background" Value="{DynamicResource PaperDarkBrush}" />
|
||||||
@@ -230,6 +263,7 @@
|
|||||||
<TabItem Header="InstalledApps" FontSize="16"/>
|
<TabItem Header="InstalledApps" FontSize="16"/>
|
||||||
<TabItem Header="Status" FontSize="16"/>
|
<TabItem Header="Status" FontSize="16"/>
|
||||||
<TabItem Header="Osquery" FontSize="16"/>
|
<TabItem Header="Osquery" FontSize="16"/>
|
||||||
|
<TabItem Header="Service" FontSize="16"/>
|
||||||
</TabControl>
|
</TabControl>
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
@@ -456,6 +490,120 @@
|
|||||||
</Grid>
|
</Grid>
|
||||||
</TabItem>
|
</TabItem>
|
||||||
|
|
||||||
|
<!-- 🔹 Service Tab -->
|
||||||
|
<TabItem Header="Service">
|
||||||
|
<Grid Background="{DynamicResource BackgroundDarkBrush}" Margin="10">
|
||||||
|
<Grid.RowDefinitions>
|
||||||
|
<RowDefinition Height="Auto"/>
|
||||||
|
<RowDefinition Height="Auto"/>
|
||||||
|
<RowDefinition Height="*"/>
|
||||||
|
</Grid.RowDefinitions>
|
||||||
|
|
||||||
|
<!-- Service Status Section -->
|
||||||
|
<Border Grid.Row="0" Background="{DynamicResource CardBackgroundBrush}"
|
||||||
|
CornerRadius="8" Padding="15" Margin="0,0,0,15">
|
||||||
|
<StackPanel>
|
||||||
|
<TextBlock Text="PSG-Oversight Service Status"
|
||||||
|
FontSize="16" FontWeight="Bold"
|
||||||
|
Foreground="{DynamicResource TextDarkBrush}"
|
||||||
|
Margin="0,0,0,10"/>
|
||||||
|
|
||||||
|
<StackPanel Orientation="Horizontal" Margin="0,5">
|
||||||
|
<TextBlock Text="Status:" FontWeight="Bold" Width="100"
|
||||||
|
Foreground="{DynamicResource TextDarkBrush}"/>
|
||||||
|
<TextBlock x:Name="ServiceStatusText" Text="Unknown"
|
||||||
|
Foreground="{DynamicResource AccentBrush}"/>
|
||||||
|
</StackPanel>
|
||||||
|
|
||||||
|
<StackPanel Orientation="Horizontal" Margin="0,5">
|
||||||
|
<TextBlock Text="Last Check:" FontWeight="Bold" Width="100"
|
||||||
|
Foreground="{DynamicResource TextDarkBrush}"/>
|
||||||
|
<TextBlock x:Name="ServiceLastCheckText" Text="Never"
|
||||||
|
Foreground="{DynamicResource TextDarkBrush}"/>
|
||||||
|
</StackPanel>
|
||||||
|
|
||||||
|
<WrapPanel Margin="0,10,0,0">
|
||||||
|
<Button Content="Refresh Status" Click="RefreshServiceStatus_Click"
|
||||||
|
Style="{StaticResource SmallRoundedButtonStyle}"
|
||||||
|
Width="150" HorizontalAlignment="Left"/>
|
||||||
|
<Button Content="Install Service" Click="InstallService_Click"
|
||||||
|
Style="{StaticResource SmallRoundedButtonStyle}"
|
||||||
|
Width="150" HorizontalAlignment="Left"/>
|
||||||
|
<Button Content="Uninstall Service" Click="UninstallService_Click"
|
||||||
|
Style="{StaticResource SmallRoundedButtonStyle}"
|
||||||
|
Width="150" HorizontalAlignment="Left"/>
|
||||||
|
<Button Content="Start Service" Click="StartService_Click"
|
||||||
|
Style="{StaticResource SmallRoundedButtonStyle}"
|
||||||
|
Width="150" HorizontalAlignment="Left"/>
|
||||||
|
<Button Content="Stop Service" Click="StopService_Click"
|
||||||
|
Style="{StaticResource SmallRoundedButtonStyle}"
|
||||||
|
Width="150" HorizontalAlignment="Left"/>
|
||||||
|
</WrapPanel>
|
||||||
|
</StackPanel>
|
||||||
|
</Border>
|
||||||
|
|
||||||
|
<!-- Test Operations Section -->
|
||||||
|
<Border Grid.Row="1" Background="{DynamicResource CardBackgroundBrush}"
|
||||||
|
CornerRadius="8" Padding="15" Margin="0,0,0,15">
|
||||||
|
<StackPanel>
|
||||||
|
<TextBlock Text="Test Operations"
|
||||||
|
FontSize="16" FontWeight="Bold"
|
||||||
|
Foreground="{DynamicResource TextDarkBrush}"
|
||||||
|
Margin="0,0,0,10"/>
|
||||||
|
|
||||||
|
<TextBlock Text="Click buttons below to test service operations:"
|
||||||
|
TextWrapping="Wrap"
|
||||||
|
Foreground="{DynamicResource TextDarkBrush}"
|
||||||
|
Margin="0,0,0,10"/>
|
||||||
|
|
||||||
|
<Button Content="🔍 Run Patch Compliance Check Now"
|
||||||
|
Click="TestPatchCompliance_Click"
|
||||||
|
Style="{StaticResource SmallRoundedButtonStyle}"
|
||||||
|
Margin="0,5" Width="280" HorizontalAlignment="Left"/>
|
||||||
|
|
||||||
|
<Button Content="📊 View Task Scheduler State"
|
||||||
|
Click="ViewSchedulerState_Click"
|
||||||
|
Style="{StaticResource SmallRoundedButtonStyle}"
|
||||||
|
Margin="0,5" Width="280" HorizontalAlignment="Left"/>
|
||||||
|
|
||||||
|
<Button Content="🔄 Test API Connection"
|
||||||
|
Click="TestAPIConnection_Click"
|
||||||
|
Style="{StaticResource SmallRoundedButtonStyle}"
|
||||||
|
Margin="0,5" Width="280" HorizontalAlignment="Left"/>
|
||||||
|
</StackPanel>
|
||||||
|
</Border>
|
||||||
|
|
||||||
|
<!-- Log Output Section -->
|
||||||
|
<Border Grid.Row="2" Background="{DynamicResource CardBackgroundBrush}"
|
||||||
|
CornerRadius="8" Padding="15">
|
||||||
|
<Grid>
|
||||||
|
<Grid.RowDefinitions>
|
||||||
|
<RowDefinition Height="Auto"/>
|
||||||
|
<RowDefinition Height="*"/>
|
||||||
|
</Grid.RowDefinitions>
|
||||||
|
|
||||||
|
<TextBlock Grid.Row="0" Text="Service Logs"
|
||||||
|
FontSize="14" FontWeight="Bold"
|
||||||
|
Foreground="{DynamicResource TextDarkBrush}"
|
||||||
|
Margin="0,0,0,10"/>
|
||||||
|
|
||||||
|
<ScrollViewer Grid.Row="1" VerticalScrollBarVisibility="Auto">
|
||||||
|
<TextBox x:Name="ServiceLogOutput"
|
||||||
|
Background="#1e1e1e"
|
||||||
|
Foreground="#dcdcdc"
|
||||||
|
FontFamily="Consolas"
|
||||||
|
FontSize="12"
|
||||||
|
AcceptsReturn="True"
|
||||||
|
IsReadOnly="True"
|
||||||
|
TextWrapping="Wrap"
|
||||||
|
MinHeight="200"
|
||||||
|
Text="Service logs will appear here..."/>
|
||||||
|
</ScrollViewer>
|
||||||
|
</Grid>
|
||||||
|
</Border>
|
||||||
|
</Grid>
|
||||||
|
</TabItem>
|
||||||
|
|
||||||
</TabControl>
|
</TabControl>
|
||||||
</Border>
|
</Border>
|
||||||
|
|
||||||
|
|||||||
@@ -51,6 +51,9 @@ namespace LD_SysInfo
|
|||||||
|
|
||||||
private static readonly string ConfigPath = Path.Combine(AppContext.BaseDirectory, "config.json");
|
private static readonly string ConfigPath = Path.Combine(AppContext.BaseDirectory, "config.json");
|
||||||
|
|
||||||
|
// Event to signal when system info loading is complete
|
||||||
|
public event EventHandler? SystemInfoLoaded;
|
||||||
|
|
||||||
|
|
||||||
public MainWindow()
|
public MainWindow()
|
||||||
{
|
{
|
||||||
@@ -78,7 +81,10 @@ namespace LD_SysInfo
|
|||||||
VersionTextBlock.Text = "v0.0.0";
|
VersionTextBlock.Text = "v0.0.0";
|
||||||
}
|
}
|
||||||
LoadConfig();
|
LoadConfig();
|
||||||
DisplaySystemInfo();
|
|
||||||
|
// Load system info asynchronously to avoid blocking UI
|
||||||
|
Task.Run(async () => await DisplaySystemInfoAsync());
|
||||||
|
|
||||||
AutoLogin();
|
AutoLogin();
|
||||||
|
|
||||||
// 🔍 Perform initial connectivity check
|
// 🔍 Perform initial connectivity check
|
||||||
@@ -270,6 +276,22 @@ namespace LD_SysInfo
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
private async Task DisplaySystemInfoAsync()
|
||||||
|
{
|
||||||
|
// Run system info collection on background thread
|
||||||
|
var sysInfo = await Task.Run(() => SystemInfo.GetSystemInfo());
|
||||||
|
|
||||||
|
// Update UI on UI thread
|
||||||
|
await Dispatcher.InvokeAsync(() =>
|
||||||
|
{
|
||||||
|
_cachedSystemInfo = sysInfo;
|
||||||
|
UpdateSysInfoUI(_cachedSystemInfo);
|
||||||
|
|
||||||
|
// Notify that system info has loaded
|
||||||
|
SystemInfoLoaded?.Invoke(this, EventArgs.Empty);
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
private void DisplaySystemInfo()
|
private void DisplaySystemInfo()
|
||||||
{
|
{
|
||||||
_cachedSystemInfo = SystemInfo.GetSystemInfo();
|
_cachedSystemInfo = SystemInfo.GetSystemInfo();
|
||||||
@@ -879,5 +901,313 @@ private async void RefreshButton_Click(object sender, RoutedEventArgs e)
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// ============================
|
||||||
|
// Service Tab Event Handlers
|
||||||
|
// ============================
|
||||||
|
|
||||||
|
private void RefreshServiceStatus_Click(object sender, RoutedEventArgs e)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var serviceName = "PSG-Oversight";
|
||||||
|
var service = System.ServiceProcess.ServiceController.GetServices()
|
||||||
|
.FirstOrDefault(s => s.ServiceName == serviceName);
|
||||||
|
|
||||||
|
if (service != null)
|
||||||
|
{
|
||||||
|
ServiceStatusText.Text = service.Status.ToString();
|
||||||
|
ServiceStatusText.Foreground = service.Status == System.ServiceProcess.ServiceControllerStatus.Running
|
||||||
|
? new SolidColorBrush(Colors.Green)
|
||||||
|
: new SolidColorBrush(Colors.Red);
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
ServiceStatusText.Text = "Not Installed";
|
||||||
|
ServiceStatusText.Foreground = new SolidColorBrush(Colors.Orange);
|
||||||
|
}
|
||||||
|
|
||||||
|
ServiceLastCheckText.Text = DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss");
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
ServiceStatusText.Text = $"Error: {ex.Message}";
|
||||||
|
ServiceStatusText.Foreground = new SolidColorBrush(Colors.Red);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private async void TestPatchCompliance_Click(object sender, RoutedEventArgs e)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text = "Running Patch Compliance check...\n\n";
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
// Create instances of services
|
||||||
|
var apiClient = new Services.ApiClient(_config);
|
||||||
|
var patchTask = new Services.PatchComplianceTask(_config, apiClient);
|
||||||
|
|
||||||
|
// Execute the task
|
||||||
|
await patchTask.ExecuteAsync();
|
||||||
|
|
||||||
|
ServiceLogOutput.Text += $"[{DateTime.Now}] Patch compliance check completed successfully.\n";
|
||||||
|
ServiceLogOutput.Text += "Check %LOCALAPPDATA%\\PSG-Oversight\\patch_compliance.log for details.\n";
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"[{DateTime.Now}] ERROR: {ex.Message}\n";
|
||||||
|
ServiceLogOutput.Text += $"Stack Trace:\n{ex.StackTrace}\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void ViewSchedulerState_Click(object sender, RoutedEventArgs e)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var stateFilePath = Path.Combine(
|
||||||
|
Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
|
||||||
|
"PSG-Oversight",
|
||||||
|
"task_scheduler_state.json"
|
||||||
|
);
|
||||||
|
|
||||||
|
if (File.Exists(stateFilePath))
|
||||||
|
{
|
||||||
|
var json = File.ReadAllText(stateFilePath);
|
||||||
|
var formatted = JsonConvert.SerializeObject(
|
||||||
|
JsonConvert.DeserializeObject(json),
|
||||||
|
Formatting.Indented
|
||||||
|
);
|
||||||
|
|
||||||
|
ServiceLogOutput.Text = $"Task Scheduler State:\n\n{formatted}";
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text = "Task scheduler state file not found.\nThe service may not have run any tasks yet.";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text = $"Error reading scheduler state:\n{ex.Message}";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private async void TestAPIConnection_Click(object sender, RoutedEventArgs e)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text = "Testing API connection...\n\n";
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var apiClient = new Services.ApiClient(_config);
|
||||||
|
|
||||||
|
// Test connectivity
|
||||||
|
bool isConnected = await apiClient.CheckConnectivity();
|
||||||
|
|
||||||
|
if (isConnected)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"[{DateTime.Now}] ✅ API is reachable!\n";
|
||||||
|
ServiceLogOutput.Text += $"Server URL: {_config.ServerUrl}\n";
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"[{DateTime.Now}] ❌ API is NOT reachable!\n";
|
||||||
|
ServiceLogOutput.Text += $"Server URL: {_config.ServerUrl}\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"[{DateTime.Now}] ERROR: {ex.Message}\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void InstallService_Click(object sender, RoutedEventArgs e)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text = "Installing PSG-Oversight service...\n\n";
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
// Get the path to OversightService.exe
|
||||||
|
var exePath = Path.Combine(
|
||||||
|
AppDomain.CurrentDomain.BaseDirectory,
|
||||||
|
"..", "..", "..", "..", "OversightService", "bin", "Debug", "net8.0", "OversightService.exe"
|
||||||
|
);
|
||||||
|
exePath = Path.GetFullPath(exePath);
|
||||||
|
|
||||||
|
if (!File.Exists(exePath))
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"ERROR: OversightService.exe not found at:\n{exePath}\n\n";
|
||||||
|
ServiceLogOutput.Text += "Please build the OversightService project first.";
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Create the service using sc.exe
|
||||||
|
var startInfo = new System.Diagnostics.ProcessStartInfo
|
||||||
|
{
|
||||||
|
FileName = "sc.exe",
|
||||||
|
Arguments = $"create PSG-Oversight binPath=\"{exePath}\" start=auto DisplayName=\"PSG Oversight Service\"",
|
||||||
|
UseShellExecute = false,
|
||||||
|
RedirectStandardOutput = true,
|
||||||
|
RedirectStandardError = true,
|
||||||
|
CreateNoWindow = true,
|
||||||
|
Verb = "runas" // Request admin elevation
|
||||||
|
};
|
||||||
|
|
||||||
|
var process = System.Diagnostics.Process.Start(startInfo);
|
||||||
|
process.WaitForExit();
|
||||||
|
|
||||||
|
var output = process.StandardOutput.ReadToEnd();
|
||||||
|
var error = process.StandardError.ReadToEnd();
|
||||||
|
|
||||||
|
ServiceLogOutput.Text += output;
|
||||||
|
if (!string.IsNullOrEmpty(error))
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"ERROR: {error}\n";
|
||||||
|
}
|
||||||
|
|
||||||
|
if (process.ExitCode == 0)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += "\n✅ Service installed successfully!\n";
|
||||||
|
RefreshServiceStatus_Click(sender, e);
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"\n❌ Service installation failed with exit code: {process.ExitCode}\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"ERROR: {ex.Message}\n";
|
||||||
|
ServiceLogOutput.Text += "\nNote: This operation requires administrator privileges.\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void UninstallService_Click(object sender, RoutedEventArgs e)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text = "Uninstalling PSG-Oversight service...\n\n";
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
// Stop the service first if it's running
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var service = System.ServiceProcess.ServiceController.GetServices()
|
||||||
|
.FirstOrDefault(s => s.ServiceName == "PSG-Oversight");
|
||||||
|
|
||||||
|
if (service != null && service.Status == System.ServiceProcess.ServiceControllerStatus.Running)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += "Stopping service first...\n";
|
||||||
|
service.Stop();
|
||||||
|
service.WaitForStatus(System.ServiceProcess.ServiceControllerStatus.Stopped, TimeSpan.FromSeconds(30));
|
||||||
|
ServiceLogOutput.Text += "Service stopped.\n\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch { }
|
||||||
|
|
||||||
|
// Delete the service using sc.exe
|
||||||
|
var startInfo = new System.Diagnostics.ProcessStartInfo
|
||||||
|
{
|
||||||
|
FileName = "sc.exe",
|
||||||
|
Arguments = "delete PSG-Oversight",
|
||||||
|
UseShellExecute = false,
|
||||||
|
RedirectStandardOutput = true,
|
||||||
|
RedirectStandardError = true,
|
||||||
|
CreateNoWindow = true,
|
||||||
|
Verb = "runas" // Request admin elevation
|
||||||
|
};
|
||||||
|
|
||||||
|
var process = System.Diagnostics.Process.Start(startInfo);
|
||||||
|
process.WaitForExit();
|
||||||
|
|
||||||
|
var output = process.StandardOutput.ReadToEnd();
|
||||||
|
var error = process.StandardError.ReadToEnd();
|
||||||
|
|
||||||
|
ServiceLogOutput.Text += output;
|
||||||
|
if (!string.IsNullOrEmpty(error))
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"ERROR: {error}\n";
|
||||||
|
}
|
||||||
|
|
||||||
|
if (process.ExitCode == 0)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += "\n✅ Service uninstalled successfully!\n";
|
||||||
|
RefreshServiceStatus_Click(sender, e);
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"\n❌ Service uninstallation failed with exit code: {process.ExitCode}\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"ERROR: {ex.Message}\n";
|
||||||
|
ServiceLogOutput.Text += "\nNote: This operation requires administrator privileges.\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void StartService_Click(object sender, RoutedEventArgs e)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text = "Starting PSG-Oversight service...\n\n";
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var service = System.ServiceProcess.ServiceController.GetServices()
|
||||||
|
.FirstOrDefault(s => s.ServiceName == "PSG-Oversight");
|
||||||
|
|
||||||
|
if (service == null)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += "ERROR: Service is not installed.\n";
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (service.Status == System.ServiceProcess.ServiceControllerStatus.Running)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += "Service is already running.\n";
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
service.Start();
|
||||||
|
service.WaitForStatus(System.ServiceProcess.ServiceControllerStatus.Running, TimeSpan.FromSeconds(30));
|
||||||
|
|
||||||
|
ServiceLogOutput.Text += "✅ Service started successfully!\n";
|
||||||
|
RefreshServiceStatus_Click(sender, e);
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"ERROR: {ex.Message}\n";
|
||||||
|
ServiceLogOutput.Text += "\nNote: This operation may require administrator privileges.\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void StopService_Click(object sender, RoutedEventArgs e)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text = "Stopping PSG-Oversight service...\n\n";
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var service = System.ServiceProcess.ServiceController.GetServices()
|
||||||
|
.FirstOrDefault(s => s.ServiceName == "PSG-Oversight");
|
||||||
|
|
||||||
|
if (service == null)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += "ERROR: Service is not installed.\n";
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (service.Status == System.ServiceProcess.ServiceControllerStatus.Stopped)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += "Service is already stopped.\n";
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
service.Stop();
|
||||||
|
service.WaitForStatus(System.ServiceProcess.ServiceControllerStatus.Stopped, TimeSpan.FromSeconds(30));
|
||||||
|
|
||||||
|
ServiceLogOutput.Text += "✅ Service stopped successfully!\n";
|
||||||
|
RefreshServiceStatus_Click(sender, e);
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
ServiceLogOutput.Text += $"ERROR: {ex.Message}\n";
|
||||||
|
ServiceLogOutput.Text += "\nNote: This operation may require administrator privileges.\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -264,6 +264,44 @@ namespace LD_SysInfo.Services
|
|||||||
return response;
|
return response;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Sends Windows update history (patch compliance data) to the backend API
|
||||||
|
/// </summary>
|
||||||
|
public async Task<bool> PostPatchComplianceAsync(object patchData)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
if (string.IsNullOrEmpty(jwtToken))
|
||||||
|
{
|
||||||
|
Console.WriteLine("❌ Not authenticated. Cannot send patch compliance data.");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
var jsonContent = JsonConvert.SerializeObject(patchData);
|
||||||
|
var content = new StringContent(jsonContent, Encoding.UTF8, "application/json");
|
||||||
|
|
||||||
|
var response = await SendWithAutoReauthAsync(() =>
|
||||||
|
httpClient.PostAsync(BuildUrl("/api/patch-compliance"), content)
|
||||||
|
);
|
||||||
|
|
||||||
|
if (response.IsSuccessStatusCode)
|
||||||
|
{
|
||||||
|
Console.WriteLine("✅ Patch compliance data sent successfully.");
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
Console.WriteLine($"❌ Failed to send patch compliance data: {response.StatusCode}");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
Console.WriteLine($"❌ Exception sending patch compliance data: {ex.Message}");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -9,6 +9,13 @@ namespace LD_SysInfo.Services
|
|||||||
{
|
{
|
||||||
public static class OsqueryService
|
public static class OsqueryService
|
||||||
{
|
{
|
||||||
|
private static string GetLogPath(string filename)
|
||||||
|
{
|
||||||
|
string logDir = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData), "PSG-Oversight");
|
||||||
|
Directory.CreateDirectory(logDir);
|
||||||
|
return Path.Combine(logDir, filename);
|
||||||
|
}
|
||||||
|
|
||||||
private static string GetOsqueryPath()
|
private static string GetOsqueryPath()
|
||||||
{
|
{
|
||||||
var baseDir = AppContext.BaseDirectory;
|
var baseDir = AppContext.BaseDirectory;
|
||||||
@@ -16,7 +23,11 @@ namespace LD_SysInfo.Services
|
|||||||
|
|
||||||
if (!File.Exists(path))
|
if (!File.Exists(path))
|
||||||
{
|
{
|
||||||
File.AppendAllText("osquery_error.log", $"[{DateTime.Now}] ❌ osqueryi.exe not found at {path}\n");
|
try
|
||||||
|
{
|
||||||
|
File.AppendAllText(GetLogPath("osquery_error.log"), $"[{DateTime.Now}] ❌ osqueryi.exe not found at {path}\n");
|
||||||
|
}
|
||||||
|
catch { /* Silently fail if we can't write logs */ }
|
||||||
throw new FileNotFoundException("osqueryi.exe not found", path);
|
throw new FileNotFoundException("osqueryi.exe not found", path);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -42,8 +53,12 @@ namespace LD_SysInfo.Services
|
|||||||
process.WaitForExit();
|
process.WaitForExit();
|
||||||
|
|
||||||
// Optional debug logging
|
// Optional debug logging
|
||||||
File.AppendAllText("osquery_debug.log",
|
try
|
||||||
$"[{DateTime.Now}] Ran query: {sql}\nOutput length: {output.Length}\n");
|
{
|
||||||
|
File.AppendAllText(GetLogPath("osquery_debug.log"),
|
||||||
|
$"[{DateTime.Now}] Ran query: {sql}\nOutput length: {output.Length}\n");
|
||||||
|
}
|
||||||
|
catch { /* Silently fail if we can't write logs */ }
|
||||||
|
|
||||||
return output;
|
return output;
|
||||||
}
|
}
|
||||||
@@ -69,8 +84,12 @@ namespace LD_SysInfo.Services
|
|||||||
}
|
}
|
||||||
catch (Exception ex)
|
catch (Exception ex)
|
||||||
{
|
{
|
||||||
File.AppendAllText("osquery_error.log",
|
try
|
||||||
$"[{DateTime.Now}] ⚠️ JSON parse failed for query '{sql}': {ex.Message}\n");
|
{
|
||||||
|
File.AppendAllText(GetLogPath("osquery_error.log"),
|
||||||
|
$"[{DateTime.Now}] ⚠️ JSON parse failed for query '{sql}': {ex.Message}\n");
|
||||||
|
}
|
||||||
|
catch { /* Silently fail if we can't write logs */ }
|
||||||
return new List<Dictionary<string, string>>();
|
return new List<Dictionary<string, string>>();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
152
LD-SysInfo/Services/OsqueryTaskScheduler.cs
Normal file
152
LD-SysInfo/Services/OsqueryTaskScheduler.cs
Normal file
@@ -0,0 +1,152 @@
|
|||||||
|
using System;
|
||||||
|
using System.Collections.Generic;
|
||||||
|
using System.Linq;
|
||||||
|
using System.Threading;
|
||||||
|
using System.Threading.Tasks;
|
||||||
|
using System.IO;
|
||||||
|
using Newtonsoft.Json;
|
||||||
|
|
||||||
|
namespace LD_SysInfo.Services
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Manages scheduled osquery-based tasks
|
||||||
|
/// Designed to be portable to Windows Service (OversightService) later
|
||||||
|
/// </summary>
|
||||||
|
public class OsqueryTaskScheduler
|
||||||
|
{
|
||||||
|
private readonly List<IScheduledTask> _tasks = new();
|
||||||
|
private readonly Timer _timer;
|
||||||
|
private readonly string _stateFilePath;
|
||||||
|
private bool _isRunning;
|
||||||
|
|
||||||
|
public OsqueryTaskScheduler()
|
||||||
|
{
|
||||||
|
// Store task state in AppData to persist last run times
|
||||||
|
var appDataDir = Path.Combine(
|
||||||
|
Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
|
||||||
|
"PSG-Oversight"
|
||||||
|
);
|
||||||
|
Directory.CreateDirectory(appDataDir);
|
||||||
|
_stateFilePath = Path.Combine(appDataDir, "task_scheduler_state.json");
|
||||||
|
|
||||||
|
// Check every minute for tasks that need to run
|
||||||
|
_timer = new Timer(CheckAndRunTasks, null, TimeSpan.Zero, TimeSpan.FromMinutes(1));
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Register a task with the scheduler
|
||||||
|
/// </summary>
|
||||||
|
public void RegisterTask(IScheduledTask task)
|
||||||
|
{
|
||||||
|
_tasks.Add(task);
|
||||||
|
LoadTaskState(task);
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Start the scheduler
|
||||||
|
/// </summary>
|
||||||
|
public void Start()
|
||||||
|
{
|
||||||
|
_isRunning = true;
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Stop the scheduler
|
||||||
|
/// </summary>
|
||||||
|
public void Stop()
|
||||||
|
{
|
||||||
|
_isRunning = false;
|
||||||
|
_timer?.Change(Timeout.Infinite, Timeout.Infinite);
|
||||||
|
}
|
||||||
|
|
||||||
|
private async void CheckAndRunTasks(object? state)
|
||||||
|
{
|
||||||
|
if (!_isRunning) return;
|
||||||
|
|
||||||
|
foreach (var task in _tasks.Where(t => t.ShouldRun()))
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
await task.ExecuteAsync();
|
||||||
|
task.LastRun = DateTime.Now;
|
||||||
|
SaveTaskState(task);
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"Task '{task.TaskName}' failed: {ex.Message}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void LoadTaskState(IScheduledTask task)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
if (!File.Exists(_stateFilePath)) return;
|
||||||
|
|
||||||
|
var json = File.ReadAllText(_stateFilePath);
|
||||||
|
var states = JsonConvert.DeserializeObject<Dictionary<string, DateTime>>(json);
|
||||||
|
|
||||||
|
if (states != null && states.TryGetValue(task.TaskName, out var lastRun))
|
||||||
|
{
|
||||||
|
task.LastRun = lastRun;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"Failed to load task state: {ex.Message}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void SaveTaskState(IScheduledTask task)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
Dictionary<string, DateTime> states;
|
||||||
|
|
||||||
|
if (File.Exists(_stateFilePath))
|
||||||
|
{
|
||||||
|
var json = File.ReadAllText(_stateFilePath);
|
||||||
|
states = JsonConvert.DeserializeObject<Dictionary<string, DateTime>>(json)
|
||||||
|
?? new Dictionary<string, DateTime>();
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
states = new Dictionary<string, DateTime>();
|
||||||
|
}
|
||||||
|
|
||||||
|
states[task.TaskName] = task.LastRun ?? DateTime.Now;
|
||||||
|
|
||||||
|
var updatedJson = JsonConvert.SerializeObject(states, Formatting.Indented);
|
||||||
|
File.WriteAllText(_stateFilePath, updatedJson);
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"Failed to save task state: {ex.Message}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void LogError(string message)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var logDir = Path.Combine(
|
||||||
|
Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
|
||||||
|
"PSG-Oversight"
|
||||||
|
);
|
||||||
|
var logPath = Path.Combine(logDir, "scheduler_error.log");
|
||||||
|
File.AppendAllText(logPath, $"[{DateTime.Now}] {message}\n");
|
||||||
|
}
|
||||||
|
catch
|
||||||
|
{
|
||||||
|
// Silently fail if we can't write logs
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
public void Dispose()
|
||||||
|
{
|
||||||
|
Stop();
|
||||||
|
_timer?.Dispose();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
132
LD-SysInfo/Services/PatchComplianceTask.cs
Normal file
132
LD-SysInfo/Services/PatchComplianceTask.cs
Normal file
@@ -0,0 +1,132 @@
|
|||||||
|
using System;
|
||||||
|
using System.Collections.Generic;
|
||||||
|
using System.Linq;
|
||||||
|
using System.Threading.Tasks;
|
||||||
|
|
||||||
|
namespace LD_SysInfo.Services
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Scheduled task that collects Windows update history using osquery
|
||||||
|
/// and sends it to the backend API
|
||||||
|
/// </summary>
|
||||||
|
public class PatchComplianceTask : ScheduledTask
|
||||||
|
{
|
||||||
|
private readonly AppConfig _config;
|
||||||
|
private readonly ApiClient _apiClient;
|
||||||
|
|
||||||
|
public override string TaskName => "PatchCompliance";
|
||||||
|
|
||||||
|
public override TimeSpan Interval =>
|
||||||
|
TimeSpan.FromHours(_config.PatchCompliance.CheckIntervalHours);
|
||||||
|
|
||||||
|
public PatchComplianceTask(AppConfig config, ApiClient apiClient)
|
||||||
|
{
|
||||||
|
_config = config;
|
||||||
|
_apiClient = apiClient;
|
||||||
|
|
||||||
|
// Initialize LastRun from config if available
|
||||||
|
LastRun = _config.PatchCompliance.LastCheckTime;
|
||||||
|
}
|
||||||
|
|
||||||
|
public override bool ShouldRun()
|
||||||
|
{
|
||||||
|
// Don't run if disabled in config
|
||||||
|
if (!_config.PatchCompliance.Enabled)
|
||||||
|
return false;
|
||||||
|
|
||||||
|
return base.ShouldRun();
|
||||||
|
}
|
||||||
|
|
||||||
|
public override async Task ExecuteAsync()
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
// Query windows_update_history from osquery
|
||||||
|
var updates = OsqueryService.Query(@"
|
||||||
|
SELECT
|
||||||
|
date,
|
||||||
|
title,
|
||||||
|
update_id
|
||||||
|
FROM windows_update_history
|
||||||
|
ORDER BY date DESC;
|
||||||
|
");
|
||||||
|
|
||||||
|
if (!updates.Any())
|
||||||
|
{
|
||||||
|
LogInfo("No Windows update history found.");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Transform to API-friendly format
|
||||||
|
var patchData = updates.Select(u => new
|
||||||
|
{
|
||||||
|
date = u.GetValueOrDefault("date"),
|
||||||
|
title = u.GetValueOrDefault("title"),
|
||||||
|
updateId = u.GetValueOrDefault("update_id")
|
||||||
|
}).ToList();
|
||||||
|
|
||||||
|
LogInfo($"Collected {patchData.Count} Windows updates.");
|
||||||
|
|
||||||
|
// Send to API
|
||||||
|
await _apiClient.PostPatchComplianceAsync(patchData);
|
||||||
|
|
||||||
|
// Update config with last check time
|
||||||
|
_config.PatchCompliance.LastCheckTime = DateTime.Now;
|
||||||
|
SaveConfig();
|
||||||
|
|
||||||
|
LogInfo("Patch compliance data sent successfully.");
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"PatchComplianceTask failed: {ex.Message}");
|
||||||
|
throw;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void SaveConfig()
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var configPath = System.IO.Path.Combine(AppContext.BaseDirectory, "config.json");
|
||||||
|
var json = Newtonsoft.Json.JsonConvert.SerializeObject(_config, Newtonsoft.Json.Formatting.Indented);
|
||||||
|
System.IO.File.WriteAllText(configPath, json);
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"Failed to save config: {ex.Message}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void LogInfo(string message)
|
||||||
|
{
|
||||||
|
if (!_config.EnableLogging) return;
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var logDir = System.IO.Path.Combine(
|
||||||
|
Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
|
||||||
|
"PSG-Oversight"
|
||||||
|
);
|
||||||
|
System.IO.Directory.CreateDirectory(logDir);
|
||||||
|
var logPath = System.IO.Path.Combine(logDir, "patch_compliance.log");
|
||||||
|
System.IO.File.AppendAllText(logPath, $"[{DateTime.Now}] INFO: {message}\n");
|
||||||
|
}
|
||||||
|
catch { }
|
||||||
|
}
|
||||||
|
|
||||||
|
private void LogError(string message)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var logDir = System.IO.Path.Combine(
|
||||||
|
Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
|
||||||
|
"PSG-Oversight"
|
||||||
|
);
|
||||||
|
System.IO.Directory.CreateDirectory(logDir);
|
||||||
|
var logPath = System.IO.Path.Combine(logDir, "patch_compliance.log");
|
||||||
|
System.IO.File.AppendAllText(logPath, $"[{DateTime.Now}] ERROR: {message}\n");
|
||||||
|
}
|
||||||
|
catch { }
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
35
LD-SysInfo/Services/ScheduledTask.cs
Normal file
35
LD-SysInfo/Services/ScheduledTask.cs
Normal file
@@ -0,0 +1,35 @@
|
|||||||
|
using System;
|
||||||
|
using System.Threading.Tasks;
|
||||||
|
|
||||||
|
namespace LD_SysInfo.Services
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Base interface for scheduled tasks
|
||||||
|
/// </summary>
|
||||||
|
public interface IScheduledTask
|
||||||
|
{
|
||||||
|
string TaskName { get; }
|
||||||
|
TimeSpan Interval { get; }
|
||||||
|
DateTime? LastRun { get; set; }
|
||||||
|
Task ExecuteAsync();
|
||||||
|
bool ShouldRun();
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Base class for scheduled tasks with common logic
|
||||||
|
/// </summary>
|
||||||
|
public abstract class ScheduledTask : IScheduledTask
|
||||||
|
{
|
||||||
|
public abstract string TaskName { get; }
|
||||||
|
public abstract TimeSpan Interval { get; }
|
||||||
|
public DateTime? LastRun { get; set; }
|
||||||
|
|
||||||
|
public abstract Task ExecuteAsync();
|
||||||
|
|
||||||
|
public virtual bool ShouldRun()
|
||||||
|
{
|
||||||
|
if (LastRun == null) return true;
|
||||||
|
return DateTime.Now - LastRun >= Interval;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -142,10 +142,10 @@ namespace LD_SysInfo
|
|||||||
}
|
}
|
||||||
|
|
||||||
// ✅ Drives
|
// ✅ Drives
|
||||||
info.Drives = OsqueryService.Query("SELECT device, size, free_space, type FROM logical_drives;")
|
info.Drives = OsqueryService.Query("SELECT device_id, size, free_space, type FROM logical_drives;")
|
||||||
.Select(d => new DriveInfoSummary
|
.Select(d => new DriveInfoSummary
|
||||||
{
|
{
|
||||||
Name = d.GetValueOrDefault("device"),
|
Name = d.GetValueOrDefault("device_id"),
|
||||||
TotalSizeGB = d.ContainsKey("size") && double.TryParse(d["size"], out double size)
|
TotalSizeGB = d.ContainsKey("size") && double.TryParse(d["size"], out double size)
|
||||||
? Math.Round(size / (1024.0 * 1024.0 * 1024.0), 2) : 0,
|
? Math.Round(size / (1024.0 * 1024.0 * 1024.0), 2) : 0,
|
||||||
FreeSpaceGB = d.ContainsKey("free_space") && double.TryParse(d["free_space"], out double free)
|
FreeSpaceGB = d.ContainsKey("free_space") && double.TryParse(d["free_space"], out double free)
|
||||||
@@ -179,9 +179,9 @@ namespace LD_SysInfo
|
|||||||
.Where(ni => !string.IsNullOrEmpty(ni.IpAddress))
|
.Where(ni => !string.IsNullOrEmpty(ni.IpAddress))
|
||||||
.ToList();
|
.ToList();
|
||||||
|
|
||||||
// ✅ Last boot time
|
// ✅ Last boot time - calculate from current time minus uptime
|
||||||
info.LastBootTime = OsqueryService.Query("SELECT datetime(boot_time, 'unixepoch') AS last_boot FROM uptime;")
|
info.LastBootTime = OsqueryService.Query("SELECT datetime((SELECT CAST(unix_time AS INTEGER) FROM time) - total_seconds, 'unixepoch') as boot_time FROM uptime;")
|
||||||
.FirstOrDefault()?.GetValueOrDefault("last_boot");
|
.FirstOrDefault()?.GetValueOrDefault("boot_time");
|
||||||
|
|
||||||
// ✅ Installed apps (user + system)
|
// ✅ Installed apps (user + system)
|
||||||
info.InstalledApplications = OsqueryService.Query("SELECT name, version, publisher FROM programs;")
|
info.InstalledApplications = OsqueryService.Query("SELECT name, version, publisher FROM programs;")
|
||||||
@@ -218,7 +218,17 @@ namespace LD_SysInfo
|
|||||||
}
|
}
|
||||||
catch (Exception ex)
|
catch (Exception ex)
|
||||||
{
|
{
|
||||||
File.AppendAllText("osquery_error.log", $"[{DateTime.Now}] {ex}\n");
|
try
|
||||||
|
{
|
||||||
|
string logDir = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData), "PSG-Oversight");
|
||||||
|
Directory.CreateDirectory(logDir);
|
||||||
|
string logPath = Path.Combine(logDir, "osquery_error.log");
|
||||||
|
File.AppendAllText(logPath, $"[{DateTime.Now}] {ex}\n");
|
||||||
|
}
|
||||||
|
catch
|
||||||
|
{
|
||||||
|
// Silently fail if we can't write logs
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
return info;
|
return info;
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 324 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 1.6 KiB |
Binary file not shown.
Binary file not shown.
@@ -1,35 +0,0 @@
|
|||||||
<Project Sdk="WixToolset.Sdk/5.0.2">
|
|
||||||
<PropertyGroup>
|
|
||||||
<Platform Condition=" '$(Platform)' == '' ">x64</Platform>
|
|
||||||
</PropertyGroup>
|
|
||||||
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x86'">
|
|
||||||
<SuppressAllWarnings>false</SuppressAllWarnings>
|
|
||||||
<Pedantic>true</Pedantic>
|
|
||||||
</PropertyGroup>
|
|
||||||
<ItemGroup>
|
|
||||||
<Compile Include="Product.wxs" />
|
|
||||||
</ItemGroup>
|
|
||||||
<ItemGroup>
|
|
||||||
<Folder Include="Assets" />
|
|
||||||
</ItemGroup>
|
|
||||||
<ItemGroup>
|
|
||||||
<Content Include="Assets\LDShortcut.ico" />
|
|
||||||
<Content Include="Assets\windowsdesktop-runtime-8.0.13-win-x64.exe">
|
|
||||||
<CopyToOutputDirectory>Always</CopyToOutputDirectory>
|
|
||||||
</Content>
|
|
||||||
</ItemGroup>
|
|
||||||
<ItemGroup>
|
|
||||||
<ProjectReference Include="..\LD-SysInfo\LD-SysInfo.csproj">
|
|
||||||
<Name>LD-SysInfo</Name>
|
|
||||||
<Project>{604bf69a-6bff-4637-88b5-78936c7eb68f}</Project>
|
|
||||||
<Private>True</Private>
|
|
||||||
<DoNotHarvest>True</DoNotHarvest>
|
|
||||||
<RefProjectOutputGroups>Binaries;Content;Satellites</RefProjectOutputGroups>
|
|
||||||
<RefTargetDir>INSTALLFOLDER</RefTargetDir>
|
|
||||||
</ProjectReference>
|
|
||||||
</ItemGroup>
|
|
||||||
<ItemGroup>
|
|
||||||
<PackageReference Include="WixToolset.UI.wixext" Version="5.0.2" />
|
|
||||||
</ItemGroup>
|
|
||||||
<Target Name="CollectSuggestedVisualStudioComponentIds" />
|
|
||||||
</Project>
|
|
||||||
@@ -1,36 +0,0 @@
|
|||||||
<?xml version='1.0' encoding='utf-8'?>
|
|
||||||
<Wix xmlns="http://wixtoolset.org/schemas/v4/wxs">
|
|
||||||
<Package
|
|
||||||
Name="LD SystemInfo"
|
|
||||||
Language="1033"
|
|
||||||
Version="1.0.0.1"
|
|
||||||
Manufacturer="Paragon Systems Group"
|
|
||||||
UpgradeCode="9D09C022-75B6-47B5-A211-59B7CE8E7B6B"
|
|
||||||
InstallerVersion="500">
|
|
||||||
|
|
||||||
<MajorUpgrade DowngradeErrorMessage="A newer version of [ProductName] is already installed." />
|
|
||||||
|
|
||||||
<Feature Id="MainFeature" Title="LD SysInfo" Level="1">
|
|
||||||
<ComponentRef Id="MainExecutable" />
|
|
||||||
<ComponentRef Id="AssetsComponent" />
|
|
||||||
</Feature>
|
|
||||||
|
|
||||||
<StandardDirectory Id="ProgramFiles64Folder">
|
|
||||||
<Directory Id="INSTALLFOLDER" Name="LD_SysInfo">
|
|
||||||
<Directory Id="AppFolder" Name="App">
|
|
||||||
<Component Id="MainExecutable" Guid="B769A39D-4807-4D12-B0CB-808E037DFA21" >
|
|
||||||
<File Id="MainEXE" Name="LD-SysInfo.exe" Source="LD-SysInfo.exe" KeyPath="yes" />
|
|
||||||
<RegistryValue Root="HKLM" Key="Software\LD_SysInfo" Name="Installed" Type="integer" Value="1" />
|
|
||||||
</Component>
|
|
||||||
</Directory>
|
|
||||||
<Directory Id="AssetsFolder" Name="Assets">
|
|
||||||
<Component Id="AssetsComponent" Guid="5E6F1D88-36E6-44F1-BD4C-BFC58B47A10D">
|
|
||||||
<File Id="TrayIconIco" Name="trayicon.ico" Source="Assets\trayicon.ico" />
|
|
||||||
<File Id="LDShortcutIconFile" Name="LDShortcut.ico" Source="Assets\LDShortcut.ico" KeyPath="yes" />
|
|
||||||
</Component>
|
|
||||||
</Directory>
|
|
||||||
</Directory>
|
|
||||||
</StandardDirectory>
|
|
||||||
|
|
||||||
</Package>
|
|
||||||
</Wix>
|
|
||||||
@@ -1,6 +1,8 @@
|
|||||||
<Wix xmlns="http://wixtoolset.org/schemas/v4/wxs">
|
<Wix xmlns="http://wixtoolset.org/schemas/v4/wxs">
|
||||||
<Fragment>
|
<Fragment>
|
||||||
<DirectoryRef Id="INSTALLFOLDER">
|
<DirectoryRef Id="INSTALLFOLDER">
|
||||||
|
|
||||||
|
<Directory Id="AssetsDir" Name="Assets" />
|
||||||
<Component Id="cmpUPL4zyYGpfRaDjFUWL7r0.VHZKs" Guid="F0E00FBB-B63A-4DED-A177-8E79C2A4C1CB">
|
<Component Id="cmpUPL4zyYGpfRaDjFUWL7r0.VHZKs" Guid="F0E00FBB-B63A-4DED-A177-8E79C2A4C1CB">
|
||||||
<File Id="fil_giGueDAhkHg7IGVpG9lWyNnt9g" KeyPath="yes" Source="C:\Users\Sonder\source\repos\psg-oversight-app\PublishDir\config.json" />
|
<File Id="fil_giGueDAhkHg7IGVpG9lWyNnt9g" KeyPath="yes" Source="C:\Users\Sonder\source\repos\psg-oversight-app\PublishDir\config.json" />
|
||||||
</Component>
|
</Component>
|
||||||
@@ -25,6 +27,12 @@
|
|||||||
<Component Id="cmppJtSGEjpkqcE6B80qiNcp7uzu_E" Guid="7296EA6A-9666-4934-896D-EB3CFE7DADD9">
|
<Component Id="cmppJtSGEjpkqcE6B80qiNcp7uzu_E" Guid="7296EA6A-9666-4934-896D-EB3CFE7DADD9">
|
||||||
<File Id="filBmC5aLvP1Wdue27MeciP9pIZ9E0" KeyPath="yes" Source="C:\Users\Sonder\source\repos\psg-oversight-app\PublishDir\wpfgfx_cor3.dll" />
|
<File Id="filBmC5aLvP1Wdue27MeciP9pIZ9E0" KeyPath="yes" Source="C:\Users\Sonder\source\repos\psg-oversight-app\PublishDir\wpfgfx_cor3.dll" />
|
||||||
</Component>
|
</Component>
|
||||||
|
<Component Id="cmpOsqueryiExe" Guid="78D245E5-73F1-4D1B-AC1D-E17FAB258CFD"
|
||||||
|
Directory="AssetsDir">
|
||||||
|
<File Id="filOsqueryiExe" KeyPath="yes"
|
||||||
|
Source="C:\Users\Sonder\source\repos\psg-oversight-app\PublishDir\Assets\osqueryi.exe" />
|
||||||
|
</Component>
|
||||||
|
|
||||||
</DirectoryRef>
|
</DirectoryRef>
|
||||||
</Fragment>
|
</Fragment>
|
||||||
<Fragment>
|
<Fragment>
|
||||||
@@ -37,6 +45,7 @@
|
|||||||
<ComponentRef Id="cmp9p11pVvfHzWT3MHfTpVVHhJz4Mc" />
|
<ComponentRef Id="cmp9p11pVvfHzWT3MHfTpVVHhJz4Mc" />
|
||||||
<ComponentRef Id="cmpIlHre.6vyW_rNEMiyejz2LzF40A" />
|
<ComponentRef Id="cmpIlHre.6vyW_rNEMiyejz2LzF40A" />
|
||||||
<ComponentRef Id="cmppJtSGEjpkqcE6B80qiNcp7uzu_E" />
|
<ComponentRef Id="cmppJtSGEjpkqcE6B80qiNcp7uzu_E" />
|
||||||
|
<ComponentRef Id="cmpOsqueryiExe" />
|
||||||
</ComponentGroup>
|
</ComponentGroup>
|
||||||
</Fragment>
|
</Fragment>
|
||||||
</Wix>
|
</Wix>
|
||||||
@@ -50,6 +50,7 @@
|
|||||||
<Content Include="Assets\DLShortcut.ico" CopyToOutputDirectory="Always" />
|
<Content Include="Assets\DLShortcut.ico" CopyToOutputDirectory="Always" />
|
||||||
<Content Include="Assets\trayicon.ico" CopyToOutputDirectory="Always" />
|
<Content Include="Assets\trayicon.ico" CopyToOutputDirectory="Always" />
|
||||||
<Content Include="bpl.rtf" CopyToOutputDirectory="Always" />
|
<Content Include="bpl.rtf" CopyToOutputDirectory="Always" />
|
||||||
|
<Content Include="Assets\osqueryi.exe" CopyToOutputDirectory="Always" />
|
||||||
<None Include="Assets\windowsdesktop-runtime-8.0.13-win-x64.exe" />
|
<None Include="Assets\windowsdesktop-runtime-8.0.13-win-x64.exe" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
|
|
||||||
|
|||||||
@@ -89,6 +89,7 @@
|
|||||||
<Feature Id="Main" Title="DL SysInfo" Level="1">
|
<Feature Id="Main" Title="DL SysInfo" Level="1">
|
||||||
<ComponentGroupRef Id="AppFiles" />
|
<ComponentGroupRef Id="AppFiles" />
|
||||||
<ComponentRef Id="StartMenuShortcutComponent" />
|
<ComponentRef Id="StartMenuShortcutComponent" />
|
||||||
|
<ComponentRef Id="cmpOsqueryiExe" />
|
||||||
<ComponentRef Id="AppMetadata" />
|
<ComponentRef Id="AppMetadata" />
|
||||||
</Feature>
|
</Feature>
|
||||||
|
|
||||||
|
|||||||
47
OversightService/Config.cs
Normal file
47
OversightService/Config.cs
Normal file
@@ -0,0 +1,47 @@
|
|||||||
|
#nullable disable
|
||||||
|
using System;
|
||||||
|
using System.IO;
|
||||||
|
|
||||||
|
using Newtonsoft.Json;
|
||||||
|
|
||||||
|
namespace OversightService
|
||||||
|
{
|
||||||
|
public class AppConfig
|
||||||
|
{
|
||||||
|
[JsonProperty("ServerUrl")] public string ServerUrl { get; set; } = "https://yourserver.com/api/status";
|
||||||
|
[JsonProperty("EnableLogging")] public bool EnableLogging { get; set; } = true;
|
||||||
|
[JsonProperty("KeepAlivePeriod")] public int KeepAlivePeriod { get; set; } = 30;
|
||||||
|
[JsonProperty("SystemInfoInterval")] public int SystemInfoInterval { get; set; } = 60;
|
||||||
|
[JsonProperty("ClientIdentifier")] public string ClientIdentifier { get; set; } = "your-default-client-id";
|
||||||
|
[JsonProperty("Auth")] public AuthConfig Auth { get; set; } = new();
|
||||||
|
[JsonProperty("PatchCompliance")] public PatchComplianceConfig PatchCompliance { get; set; } = new();
|
||||||
|
}
|
||||||
|
|
||||||
|
public class PatchComplianceConfig
|
||||||
|
{
|
||||||
|
[JsonProperty("Enabled")] public bool Enabled { get; set; } = false;
|
||||||
|
[JsonProperty("CheckIntervalHours")] public int CheckIntervalHours { get; set; } = 24;
|
||||||
|
[JsonProperty("LastCheckTime")] public DateTime? LastCheckTime { get; set; } = null;
|
||||||
|
}
|
||||||
|
|
||||||
|
public class AuthConfig
|
||||||
|
{
|
||||||
|
[JsonProperty("Username")] public string Username { get; set; } = "testuser";
|
||||||
|
[JsonProperty("Password")] public string Password { get; set; } = "testpassword";
|
||||||
|
}
|
||||||
|
|
||||||
|
public static class ConfigManager
|
||||||
|
{
|
||||||
|
private static readonly string ConfigPath = Path.Combine(AppContext.BaseDirectory, "config.json");
|
||||||
|
|
||||||
|
public static AppConfig LoadConfig(string? pathOverride = null)
|
||||||
|
{
|
||||||
|
string path = pathOverride ?? ConfigPath;
|
||||||
|
if (!File.Exists(path))
|
||||||
|
throw new FileNotFoundException($"Config file not found at {path}");
|
||||||
|
|
||||||
|
string json = File.ReadAllText(path);
|
||||||
|
return JsonConvert.DeserializeObject<AppConfig>(json) ?? new AppConfig();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
36
OversightService/EncryptionHelper.cs
Normal file
36
OversightService/EncryptionHelper.cs
Normal file
@@ -0,0 +1,36 @@
|
|||||||
|
using System;
|
||||||
|
using System.IO;
|
||||||
|
using System.Security.Cryptography;
|
||||||
|
using System.Text;
|
||||||
|
|
||||||
|
namespace OversightService
|
||||||
|
{
|
||||||
|
public class EncryptionHelper
|
||||||
|
{
|
||||||
|
private static readonly byte[] Key = Encoding.UTF8.GetBytes("HWJGbwmF2pWdXySDExMNEbJSrXn0YCBF"); // 32 bytes for AES-256
|
||||||
|
private static readonly byte[] IV = Encoding.UTF8.GetBytes("VWYRtYCfch0sKs6k"); // 16 bytes
|
||||||
|
|
||||||
|
public static string EncryptData(string plainText)
|
||||||
|
{
|
||||||
|
using (Aes aes = Aes.Create())
|
||||||
|
{
|
||||||
|
aes.Key = Key;
|
||||||
|
aes.IV = IV;
|
||||||
|
aes.Mode = CipherMode.CBC;
|
||||||
|
aes.Padding = PaddingMode.PKCS7;
|
||||||
|
|
||||||
|
using (MemoryStream ms = new MemoryStream())
|
||||||
|
using (CryptoStream cs = new CryptoStream(ms, aes.CreateEncryptor(), CryptoStreamMode.Write))
|
||||||
|
{
|
||||||
|
using (StreamWriter sw = new StreamWriter(cs, new UTF8Encoding(false))) // Disable BOM
|
||||||
|
{
|
||||||
|
sw.Write(plainText);
|
||||||
|
}
|
||||||
|
byte[] encryptedBytes = ms.ToArray();
|
||||||
|
string encryptedBase64 = Convert.ToBase64String(encryptedBytes);
|
||||||
|
return encryptedBase64;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -7,7 +7,29 @@
|
|||||||
<UserSecretsId>dotnet-OversightService-9352272b-722c-4a12-acc2-8c9b146e5292</UserSecretsId>
|
<UserSecretsId>dotnet-OversightService-9352272b-722c-4a12-acc2-8c9b146e5292</UserSecretsId>
|
||||||
</PropertyGroup>
|
</PropertyGroup>
|
||||||
|
|
||||||
|
<PropertyGroup>
|
||||||
|
<EnableDefaultContentItems>false</EnableDefaultContentItems>
|
||||||
|
</PropertyGroup>
|
||||||
|
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
<PackageReference Include="Microsoft.Extensions.Hosting" />
|
<PackageReference Include="Microsoft.Extensions.Hosting" />
|
||||||
|
<PackageReference Include="Microsoft.Extensions.Hosting.WindowsServices" />
|
||||||
|
<PackageReference Include="Newtonsoft.Json" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
|
|
||||||
|
<ItemGroup>
|
||||||
|
<Content Include="osqueryi.exe">
|
||||||
|
<CopyToOutputDirectory>Always</CopyToOutputDirectory>
|
||||||
|
</Content>
|
||||||
|
<Content Include="config.json">
|
||||||
|
<CopyToOutputDirectory>Always</CopyToOutputDirectory>
|
||||||
|
</Content>
|
||||||
|
<Content Include="appsettings.json">
|
||||||
|
<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
|
||||||
|
</Content>
|
||||||
|
<Content Include="appsettings.Development.json">
|
||||||
|
<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
|
||||||
|
</Content>
|
||||||
|
</ItemGroup>
|
||||||
|
|
||||||
</Project>
|
</Project>
|
||||||
|
|||||||
@@ -1,6 +1,13 @@
|
|||||||
using OversightService;
|
using OversightService;
|
||||||
|
|
||||||
var builder = Host.CreateApplicationBuilder(args);
|
var builder = Host.CreateApplicationBuilder(args);
|
||||||
|
|
||||||
|
// Configure Windows Service with custom service name
|
||||||
|
builder.Services.AddWindowsService(options =>
|
||||||
|
{
|
||||||
|
options.ServiceName = "PSG-Oversight";
|
||||||
|
});
|
||||||
|
|
||||||
builder.Services.AddHostedService<Worker>();
|
builder.Services.AddHostedService<Worker>();
|
||||||
|
|
||||||
var host = builder.Build();
|
var host = builder.Build();
|
||||||
|
|||||||
317
OversightService/Services/ApiClient.cs
Normal file
317
OversightService/Services/ApiClient.cs
Normal file
@@ -0,0 +1,317 @@
|
|||||||
|
using System;
|
||||||
|
using System.IO;
|
||||||
|
using System.Net.Http;
|
||||||
|
using System.Security.Cryptography.X509Certificates;
|
||||||
|
using System.Net.Security;
|
||||||
|
using System.Text;
|
||||||
|
using System.Threading.Tasks;
|
||||||
|
using Newtonsoft.Json;
|
||||||
|
|
||||||
|
namespace OversightService.Services
|
||||||
|
{
|
||||||
|
public class ApiClient
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Constructs the full URL for API requests.
|
||||||
|
/// </summary>
|
||||||
|
private static readonly HttpClient httpClient = CreateHttpClient();
|
||||||
|
private readonly AppConfig _config;
|
||||||
|
private static string jwtToken = null; // 🔹 Store the JWT token globally
|
||||||
|
|
||||||
|
public ApiClient(AppConfig config)
|
||||||
|
{
|
||||||
|
_config = config ?? throw new ArgumentNullException(nameof(config));
|
||||||
|
}
|
||||||
|
|
||||||
|
private void Log(string message)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var logDir = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData), "PSG-Oversight");
|
||||||
|
Directory.CreateDirectory(logDir);
|
||||||
|
var logPath = Path.Combine(logDir, "api_client.log");
|
||||||
|
File.AppendAllText(logPath, $"[{DateTime.Now}] {message}\n");
|
||||||
|
}
|
||||||
|
catch { }
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
private string BuildUrl(string route)
|
||||||
|
{
|
||||||
|
return $"{_config.ServerUrl.TrimEnd('/')}/{route.TrimStart('/')}";
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Creates an HttpClient that bypasses SSL validation (for testing purposes only).
|
||||||
|
/// </summary>
|
||||||
|
public static HttpClient CreateHttpClient()
|
||||||
|
{
|
||||||
|
HttpClientHandler handler = new HttpClientHandler
|
||||||
|
{
|
||||||
|
ServerCertificateCustomValidationCallback = (httpRequestMessage, cert, certChain, sslPolicyErrors) =>
|
||||||
|
{
|
||||||
|
return true; // 🔥 Ignores all SSL certificate warnings (TEMPORARY!)
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
return new HttpClient(handler);
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Sets the JWT token to be used for subsequent requests.
|
||||||
|
/// </summary>
|
||||||
|
public static void SetJwtToken(string token)
|
||||||
|
{
|
||||||
|
jwtToken = token;
|
||||||
|
httpClient.DefaultRequestHeaders.Authorization =
|
||||||
|
new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", jwtToken);
|
||||||
|
}
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the JWT token to be used for subsequent requests.
|
||||||
|
/// </summary>
|
||||||
|
public static string GetJwtToken()
|
||||||
|
{
|
||||||
|
return jwtToken;
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Authenticates with the API using credentials from config.json.
|
||||||
|
/// </summary>
|
||||||
|
public async Task<LoginResponse> AuthenticateAsync(string username, string password)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
string encryptedUsername = EncryptionHelper.EncryptData(username);
|
||||||
|
string encryptedPassword = EncryptionHelper.EncryptData(password);
|
||||||
|
|
||||||
|
var payload = new
|
||||||
|
{
|
||||||
|
username = encryptedUsername,
|
||||||
|
password = encryptedPassword
|
||||||
|
};
|
||||||
|
|
||||||
|
string jsonContent = JsonConvert.SerializeObject(payload);
|
||||||
|
var content = new StringContent(jsonContent, Encoding.UTF8, "application/json");
|
||||||
|
|
||||||
|
HttpResponseMessage response = await httpClient.PostAsync(BuildUrl("/api/auth/login"), content);
|
||||||
|
string rawResponse = await response.Content.ReadAsStringAsync();
|
||||||
|
|
||||||
|
if (!response.IsSuccessStatusCode)
|
||||||
|
{
|
||||||
|
Log($"❌ Authentication failed: {response.StatusCode} - {rawResponse}");
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
var loginResponse = JsonConvert.DeserializeObject<LoginResponse>(rawResponse);
|
||||||
|
|
||||||
|
if (!string.IsNullOrEmpty(loginResponse?.Token))
|
||||||
|
{
|
||||||
|
SetJwtToken(loginResponse.Token);
|
||||||
|
}
|
||||||
|
|
||||||
|
return loginResponse;
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
Log($"❌ Exception during login: {ex.Message}");
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Checks connectivity to the server using the stored JWT token.
|
||||||
|
/// </summary>
|
||||||
|
public async Task<bool> CheckConnectivity()
|
||||||
|
{
|
||||||
|
string testUrl = "https://localhost:8443/api/system/ping-status"; // Your HTTPS URL with port 8443
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
if (string.IsNullOrEmpty(jwtToken))
|
||||||
|
{
|
||||||
|
throw new Exception("No JWT token stored. Please authenticate first.");
|
||||||
|
}
|
||||||
|
|
||||||
|
var response = await SendWithAutoReauthAsync(() =>
|
||||||
|
httpClient.GetAsync(testUrl)
|
||||||
|
);
|
||||||
|
|
||||||
|
|
||||||
|
if (response.IsSuccessStatusCode)
|
||||||
|
{
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
Log($"❌ Server Unreachable: {response.StatusCode}");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
Log($"❌ Connection Error: {ex.Message}");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Sends the collected data to the server.
|
||||||
|
/// </summary>
|
||||||
|
public async Task<string> StoreSystemInfoAsync(string encryptedData)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
if (string.IsNullOrEmpty(jwtToken))
|
||||||
|
return "❌ Error: Not authenticated. Please log in first.";
|
||||||
|
|
||||||
|
var payload = new { data = encryptedData };
|
||||||
|
string jsonContent = JsonConvert.SerializeObject(payload);
|
||||||
|
var content = new StringContent(jsonContent, Encoding.UTF8, "application/json");
|
||||||
|
|
||||||
|
var response = await SendWithAutoReauthAsync(() =>
|
||||||
|
httpClient.PostAsync(BuildUrl("/api/system-info"), content)
|
||||||
|
);
|
||||||
|
|
||||||
|
if (response.IsSuccessStatusCode)
|
||||||
|
return await response.Content.ReadAsStringAsync();
|
||||||
|
else
|
||||||
|
return $"❌ Error: {response.StatusCode} - {await response.Content.ReadAsStringAsync()}";
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
return $"❌ Exception: {ex.Message}";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Refreshes the current JWT token without requiring username/password.
|
||||||
|
/// </summary>
|
||||||
|
public async Task<bool> RefreshTokenAsync()
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
if (string.IsNullOrEmpty(jwtToken))
|
||||||
|
{
|
||||||
|
Log("⚠️ No token to refresh.");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
HttpResponseMessage response = await httpClient.PostAsync(BuildUrl("/api/auth/refresh"), null);
|
||||||
|
string rawResponse = await response.Content.ReadAsStringAsync();
|
||||||
|
|
||||||
|
if (!response.IsSuccessStatusCode)
|
||||||
|
{
|
||||||
|
Log($"❌ Token refresh failed: {response.StatusCode} - {rawResponse}");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Parse the response to get the new token if provided in body
|
||||||
|
// Note: Your server sets it via cookie, but may also return it in response
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var refreshResponse = JsonConvert.DeserializeObject<Dictionary<string, string>>(rawResponse);
|
||||||
|
if (refreshResponse?.ContainsKey("token") == true)
|
||||||
|
{
|
||||||
|
SetJwtToken(refreshResponse["token"]);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch
|
||||||
|
{
|
||||||
|
// Token might only be in cookie, which is fine
|
||||||
|
}
|
||||||
|
|
||||||
|
Log("✅ Token refreshed successfully.");
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
Log($"❌ Exception during token refresh: {ex.Message}");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Sends the collected data to the server with automatic token refresh and re-auth.
|
||||||
|
/// </summary>
|
||||||
|
private async Task<HttpResponseMessage> SendWithAutoReauthAsync(Func<Task<HttpResponseMessage>> requestFunc)
|
||||||
|
{
|
||||||
|
var response = await requestFunc();
|
||||||
|
|
||||||
|
if (response.StatusCode == System.Net.HttpStatusCode.Unauthorized)
|
||||||
|
{
|
||||||
|
Log("⚠️ Token expired or invalid. Attempting token refresh...");
|
||||||
|
|
||||||
|
// Try refreshing the token first (faster than full re-auth)
|
||||||
|
bool refreshed = await RefreshTokenAsync();
|
||||||
|
|
||||||
|
if (refreshed)
|
||||||
|
{
|
||||||
|
// Retry original request after refresh
|
||||||
|
response = await requestFunc();
|
||||||
|
|
||||||
|
if (response.IsSuccessStatusCode)
|
||||||
|
{
|
||||||
|
return response;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// If refresh failed or didn't work, fall back to full re-authentication
|
||||||
|
Log("⚠️ Token refresh failed. Attempting full re-auth...");
|
||||||
|
var loginResponse = await AuthenticateAsync(_config.Auth.Username, _config.Auth.Password);
|
||||||
|
if (loginResponse == null || string.IsNullOrEmpty(loginResponse.Token))
|
||||||
|
{
|
||||||
|
Log("❌ Re-authentication failed.");
|
||||||
|
return response; // Return original 401 response
|
||||||
|
}
|
||||||
|
|
||||||
|
// Retry original request after reauth
|
||||||
|
response = await requestFunc();
|
||||||
|
}
|
||||||
|
|
||||||
|
return response;
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Sends Windows update history (patch compliance data) to the backend API
|
||||||
|
/// </summary>
|
||||||
|
public async Task<bool> PostPatchComplianceAsync(object patchData)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
if (string.IsNullOrEmpty(jwtToken))
|
||||||
|
{
|
||||||
|
Log("❌ Not authenticated. Cannot send patch compliance data.");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
var jsonContent = JsonConvert.SerializeObject(patchData);
|
||||||
|
var content = new StringContent(jsonContent, Encoding.UTF8, "application/json");
|
||||||
|
|
||||||
|
var response = await SendWithAutoReauthAsync(() =>
|
||||||
|
httpClient.PostAsync(BuildUrl("/api/patch-compliance"), content)
|
||||||
|
);
|
||||||
|
|
||||||
|
if (response.IsSuccessStatusCode)
|
||||||
|
{
|
||||||
|
Log("✅ Patch compliance data sent successfully.");
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
Log($"❌ Failed to send patch compliance data: {response.StatusCode}");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
Log($"❌ Exception sending patch compliance data: {ex.Message}");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
}
|
||||||
|
}
|
||||||
9
OversightService/Services/LoginResponse.cs
Normal file
9
OversightService/Services/LoginResponse.cs
Normal file
@@ -0,0 +1,9 @@
|
|||||||
|
namespace OversightService.Services
|
||||||
|
{
|
||||||
|
public class LoginResponse
|
||||||
|
{
|
||||||
|
public string Token { get; set; }
|
||||||
|
public string Username { get; set; }
|
||||||
|
public int UserId { get; set; }
|
||||||
|
}
|
||||||
|
}
|
||||||
97
OversightService/Services/OsqueryService.cs
Normal file
97
OversightService/Services/OsqueryService.cs
Normal file
@@ -0,0 +1,97 @@
|
|||||||
|
using System;
|
||||||
|
using System.Collections.Generic;
|
||||||
|
using System.Diagnostics;
|
||||||
|
using System.IO;
|
||||||
|
|
||||||
|
using Newtonsoft.Json.Linq;
|
||||||
|
|
||||||
|
namespace OversightService.Services
|
||||||
|
{
|
||||||
|
public static class OsqueryService
|
||||||
|
{
|
||||||
|
private static string GetLogPath(string filename)
|
||||||
|
{
|
||||||
|
string logDir = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData), "PSG-Oversight");
|
||||||
|
Directory.CreateDirectory(logDir);
|
||||||
|
return Path.Combine(logDir, filename);
|
||||||
|
}
|
||||||
|
|
||||||
|
private static string GetOsqueryPath()
|
||||||
|
{
|
||||||
|
var baseDir = AppContext.BaseDirectory;
|
||||||
|
var path = Path.Combine(baseDir, "Assets", "osqueryi.exe");
|
||||||
|
|
||||||
|
if (!File.Exists(path))
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
File.AppendAllText(GetLogPath("osquery_error.log"), $"[{DateTime.Now}] ❌ osqueryi.exe not found at {path}\n");
|
||||||
|
}
|
||||||
|
catch { /* Silently fail if we can't write logs */ }
|
||||||
|
throw new FileNotFoundException("osqueryi.exe not found", path);
|
||||||
|
}
|
||||||
|
|
||||||
|
return path;
|
||||||
|
}
|
||||||
|
|
||||||
|
private static string RunQuery(string sql)
|
||||||
|
{
|
||||||
|
var processInfo = new ProcessStartInfo
|
||||||
|
{
|
||||||
|
FileName = GetOsqueryPath(),
|
||||||
|
Arguments = $"--json \"{sql}\"",
|
||||||
|
RedirectStandardOutput = true,
|
||||||
|
UseShellExecute = false,
|
||||||
|
CreateNoWindow = true
|
||||||
|
};
|
||||||
|
|
||||||
|
using var process = Process.Start(processInfo); // ✅ FIXED — actually start the process
|
||||||
|
if (process == null)
|
||||||
|
throw new Exception("Failed to start osquery process");
|
||||||
|
|
||||||
|
string output = process.StandardOutput.ReadToEnd();
|
||||||
|
process.WaitForExit();
|
||||||
|
|
||||||
|
// Optional debug logging
|
||||||
|
try
|
||||||
|
{
|
||||||
|
File.AppendAllText(GetLogPath("osquery_debug.log"),
|
||||||
|
$"[{DateTime.Now}] Ran query: {sql}\nOutput length: {output.Length}\n");
|
||||||
|
}
|
||||||
|
catch { /* Silently fail if we can't write logs */ }
|
||||||
|
|
||||||
|
return output;
|
||||||
|
}
|
||||||
|
|
||||||
|
public static List<Dictionary<string, string>> Query(string sql)
|
||||||
|
{
|
||||||
|
string json = RunQuery(sql);
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var jArray = JArray.Parse(json);
|
||||||
|
var results = new List<Dictionary<string, string>>();
|
||||||
|
|
||||||
|
foreach (var obj in jArray)
|
||||||
|
{
|
||||||
|
var dict = new Dictionary<string, string>();
|
||||||
|
foreach (var prop in (JObject)obj)
|
||||||
|
dict[prop.Key] = prop.Value?.ToString() ?? "";
|
||||||
|
results.Add(dict);
|
||||||
|
}
|
||||||
|
|
||||||
|
return results;
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
File.AppendAllText(GetLogPath("osquery_error.log"),
|
||||||
|
$"[{DateTime.Now}] ⚠️ JSON parse failed for query '{sql}': {ex.Message}\n");
|
||||||
|
}
|
||||||
|
catch { /* Silently fail if we can't write logs */ }
|
||||||
|
return new List<Dictionary<string, string>>();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
152
OversightService/Services/OsqueryTaskScheduler.cs
Normal file
152
OversightService/Services/OsqueryTaskScheduler.cs
Normal file
@@ -0,0 +1,152 @@
|
|||||||
|
using System;
|
||||||
|
using System.Collections.Generic;
|
||||||
|
using System.Linq;
|
||||||
|
using System.Threading;
|
||||||
|
using System.Threading.Tasks;
|
||||||
|
using System.IO;
|
||||||
|
using Newtonsoft.Json;
|
||||||
|
|
||||||
|
namespace OversightService.Services
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Manages scheduled osquery-based tasks
|
||||||
|
/// Designed to be portable to Windows Service (OversightService) later
|
||||||
|
/// </summary>
|
||||||
|
public class OsqueryTaskScheduler
|
||||||
|
{
|
||||||
|
private readonly List<IScheduledTask> _tasks = new();
|
||||||
|
private readonly Timer _timer;
|
||||||
|
private readonly string _stateFilePath;
|
||||||
|
private bool _isRunning;
|
||||||
|
|
||||||
|
public OsqueryTaskScheduler()
|
||||||
|
{
|
||||||
|
// Store task state in AppData to persist last run times
|
||||||
|
var appDataDir = Path.Combine(
|
||||||
|
Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
|
||||||
|
"PSG-Oversight"
|
||||||
|
);
|
||||||
|
Directory.CreateDirectory(appDataDir);
|
||||||
|
_stateFilePath = Path.Combine(appDataDir, "task_scheduler_state.json");
|
||||||
|
|
||||||
|
// Check every minute for tasks that need to run
|
||||||
|
_timer = new Timer(CheckAndRunTasks, null, TimeSpan.Zero, TimeSpan.FromMinutes(1));
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Register a task with the scheduler
|
||||||
|
/// </summary>
|
||||||
|
public void RegisterTask(IScheduledTask task)
|
||||||
|
{
|
||||||
|
_tasks.Add(task);
|
||||||
|
LoadTaskState(task);
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Start the scheduler
|
||||||
|
/// </summary>
|
||||||
|
public void Start()
|
||||||
|
{
|
||||||
|
_isRunning = true;
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Stop the scheduler
|
||||||
|
/// </summary>
|
||||||
|
public void Stop()
|
||||||
|
{
|
||||||
|
_isRunning = false;
|
||||||
|
_timer?.Change(Timeout.Infinite, Timeout.Infinite);
|
||||||
|
}
|
||||||
|
|
||||||
|
private async void CheckAndRunTasks(object? state)
|
||||||
|
{
|
||||||
|
if (!_isRunning) return;
|
||||||
|
|
||||||
|
foreach (var task in _tasks.Where(t => t.ShouldRun()))
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
await task.ExecuteAsync();
|
||||||
|
task.LastRun = DateTime.Now;
|
||||||
|
SaveTaskState(task);
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"Task '{task.TaskName}' failed: {ex.Message}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void LoadTaskState(IScheduledTask task)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
if (!File.Exists(_stateFilePath)) return;
|
||||||
|
|
||||||
|
var json = File.ReadAllText(_stateFilePath);
|
||||||
|
var states = JsonConvert.DeserializeObject<Dictionary<string, DateTime>>(json);
|
||||||
|
|
||||||
|
if (states != null && states.TryGetValue(task.TaskName, out var lastRun))
|
||||||
|
{
|
||||||
|
task.LastRun = lastRun;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"Failed to load task state: {ex.Message}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void SaveTaskState(IScheduledTask task)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
Dictionary<string, DateTime> states;
|
||||||
|
|
||||||
|
if (File.Exists(_stateFilePath))
|
||||||
|
{
|
||||||
|
var json = File.ReadAllText(_stateFilePath);
|
||||||
|
states = JsonConvert.DeserializeObject<Dictionary<string, DateTime>>(json)
|
||||||
|
?? new Dictionary<string, DateTime>();
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
states = new Dictionary<string, DateTime>();
|
||||||
|
}
|
||||||
|
|
||||||
|
states[task.TaskName] = task.LastRun ?? DateTime.Now;
|
||||||
|
|
||||||
|
var updatedJson = JsonConvert.SerializeObject(states, Formatting.Indented);
|
||||||
|
File.WriteAllText(_stateFilePath, updatedJson);
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"Failed to save task state: {ex.Message}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void LogError(string message)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var logDir = Path.Combine(
|
||||||
|
Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
|
||||||
|
"PSG-Oversight"
|
||||||
|
);
|
||||||
|
var logPath = Path.Combine(logDir, "scheduler_error.log");
|
||||||
|
File.AppendAllText(logPath, $"[{DateTime.Now}] {message}\n");
|
||||||
|
}
|
||||||
|
catch
|
||||||
|
{
|
||||||
|
// Silently fail if we can't write logs
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
public void Dispose()
|
||||||
|
{
|
||||||
|
Stop();
|
||||||
|
_timer?.Dispose();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
132
OversightService/Services/PatchComplianceTask.cs
Normal file
132
OversightService/Services/PatchComplianceTask.cs
Normal file
@@ -0,0 +1,132 @@
|
|||||||
|
using System;
|
||||||
|
using System.Collections.Generic;
|
||||||
|
using System.Linq;
|
||||||
|
using System.Threading.Tasks;
|
||||||
|
|
||||||
|
namespace OversightService.Services
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Scheduled task that collects Windows update history using osquery
|
||||||
|
/// and sends it to the backend API
|
||||||
|
/// </summary>
|
||||||
|
public class PatchComplianceTask : ScheduledTask
|
||||||
|
{
|
||||||
|
private readonly AppConfig _config;
|
||||||
|
private readonly ApiClient _apiClient;
|
||||||
|
|
||||||
|
public override string TaskName => "PatchCompliance";
|
||||||
|
|
||||||
|
public override TimeSpan Interval =>
|
||||||
|
TimeSpan.FromHours(_config.PatchCompliance.CheckIntervalHours);
|
||||||
|
|
||||||
|
public PatchComplianceTask(AppConfig config, ApiClient apiClient)
|
||||||
|
{
|
||||||
|
_config = config;
|
||||||
|
_apiClient = apiClient;
|
||||||
|
|
||||||
|
// Initialize LastRun from config if available
|
||||||
|
LastRun = _config.PatchCompliance.LastCheckTime;
|
||||||
|
}
|
||||||
|
|
||||||
|
public override bool ShouldRun()
|
||||||
|
{
|
||||||
|
// Don't run if disabled in config
|
||||||
|
if (!_config.PatchCompliance.Enabled)
|
||||||
|
return false;
|
||||||
|
|
||||||
|
return base.ShouldRun();
|
||||||
|
}
|
||||||
|
|
||||||
|
public override async Task ExecuteAsync()
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
// Query windows_update_history from osquery
|
||||||
|
var updates = OsqueryService.Query(@"
|
||||||
|
SELECT
|
||||||
|
date,
|
||||||
|
title,
|
||||||
|
update_id
|
||||||
|
FROM windows_update_history
|
||||||
|
ORDER BY date DESC;
|
||||||
|
");
|
||||||
|
|
||||||
|
if (!updates.Any())
|
||||||
|
{
|
||||||
|
LogInfo("No Windows update history found.");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Transform to API-friendly format
|
||||||
|
var patchData = updates.Select(u => new
|
||||||
|
{
|
||||||
|
date = u.GetValueOrDefault("date"),
|
||||||
|
title = u.GetValueOrDefault("title"),
|
||||||
|
updateId = u.GetValueOrDefault("update_id")
|
||||||
|
}).ToList();
|
||||||
|
|
||||||
|
LogInfo($"Collected {patchData.Count} Windows updates.");
|
||||||
|
|
||||||
|
// Send to API
|
||||||
|
await _apiClient.PostPatchComplianceAsync(patchData);
|
||||||
|
|
||||||
|
// Update config with last check time
|
||||||
|
_config.PatchCompliance.LastCheckTime = DateTime.Now;
|
||||||
|
SaveConfig();
|
||||||
|
|
||||||
|
LogInfo("Patch compliance data sent successfully.");
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"PatchComplianceTask failed: {ex.Message}");
|
||||||
|
throw;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void SaveConfig()
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var configPath = System.IO.Path.Combine(AppContext.BaseDirectory, "config.json");
|
||||||
|
var json = Newtonsoft.Json.JsonConvert.SerializeObject(_config, Newtonsoft.Json.Formatting.Indented);
|
||||||
|
System.IO.File.WriteAllText(configPath, json);
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
LogError($"Failed to save config: {ex.Message}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void LogInfo(string message)
|
||||||
|
{
|
||||||
|
if (!_config.EnableLogging) return;
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var logDir = System.IO.Path.Combine(
|
||||||
|
Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
|
||||||
|
"PSG-Oversight"
|
||||||
|
);
|
||||||
|
System.IO.Directory.CreateDirectory(logDir);
|
||||||
|
var logPath = System.IO.Path.Combine(logDir, "patch_compliance.log");
|
||||||
|
System.IO.File.AppendAllText(logPath, $"[{DateTime.Now}] INFO: {message}\n");
|
||||||
|
}
|
||||||
|
catch { }
|
||||||
|
}
|
||||||
|
|
||||||
|
private void LogError(string message)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var logDir = System.IO.Path.Combine(
|
||||||
|
Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),
|
||||||
|
"PSG-Oversight"
|
||||||
|
);
|
||||||
|
System.IO.Directory.CreateDirectory(logDir);
|
||||||
|
var logPath = System.IO.Path.Combine(logDir, "patch_compliance.log");
|
||||||
|
System.IO.File.AppendAllText(logPath, $"[{DateTime.Now}] ERROR: {message}\n");
|
||||||
|
}
|
||||||
|
catch { }
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
35
OversightService/Services/ScheduledTask.cs
Normal file
35
OversightService/Services/ScheduledTask.cs
Normal file
@@ -0,0 +1,35 @@
|
|||||||
|
using System;
|
||||||
|
using System.Threading.Tasks;
|
||||||
|
|
||||||
|
namespace OversightService.Services
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Base interface for scheduled tasks
|
||||||
|
/// </summary>
|
||||||
|
public interface IScheduledTask
|
||||||
|
{
|
||||||
|
string TaskName { get; }
|
||||||
|
TimeSpan Interval { get; }
|
||||||
|
DateTime? LastRun { get; set; }
|
||||||
|
Task ExecuteAsync();
|
||||||
|
bool ShouldRun();
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Base class for scheduled tasks with common logic
|
||||||
|
/// </summary>
|
||||||
|
public abstract class ScheduledTask : IScheduledTask
|
||||||
|
{
|
||||||
|
public abstract string TaskName { get; }
|
||||||
|
public abstract TimeSpan Interval { get; }
|
||||||
|
public DateTime? LastRun { get; set; }
|
||||||
|
|
||||||
|
public abstract Task ExecuteAsync();
|
||||||
|
|
||||||
|
public virtual bool ShouldRun()
|
||||||
|
{
|
||||||
|
if (LastRun == null) return true;
|
||||||
|
return DateTime.Now - LastRun >= Interval;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -1,8 +1,12 @@
|
|||||||
|
using OversightService.Services;
|
||||||
|
|
||||||
namespace OversightService
|
namespace OversightService
|
||||||
{
|
{
|
||||||
public class Worker : BackgroundService
|
public class Worker : BackgroundService
|
||||||
{
|
{
|
||||||
private readonly ILogger<Worker> _logger;
|
private readonly ILogger<Worker> _logger;
|
||||||
|
private OsqueryTaskScheduler? _taskScheduler;
|
||||||
|
private AppConfig? _config;
|
||||||
|
|
||||||
public Worker(ILogger<Worker> logger)
|
public Worker(ILogger<Worker> logger)
|
||||||
{
|
{
|
||||||
@@ -11,14 +15,77 @@ namespace OversightService
|
|||||||
|
|
||||||
protected override async Task ExecuteAsync(CancellationToken stoppingToken)
|
protected override async Task ExecuteAsync(CancellationToken stoppingToken)
|
||||||
{
|
{
|
||||||
|
_logger.LogInformation("OversightService starting...");
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
// Load configuration
|
||||||
|
_config = LoadConfig();
|
||||||
|
_logger.LogInformation("Configuration loaded successfully.");
|
||||||
|
|
||||||
|
// Initialize osquery task scheduler
|
||||||
|
InitializeTaskScheduler();
|
||||||
|
_logger.LogInformation("Task scheduler initialized successfully.");
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
_logger.LogError(ex, "Failed to initialize OversightService");
|
||||||
|
throw;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Keep service running
|
||||||
while (!stoppingToken.IsCancellationRequested)
|
while (!stoppingToken.IsCancellationRequested)
|
||||||
{
|
{
|
||||||
if (_logger.IsEnabled(LogLevel.Information))
|
await Task.Delay(TimeSpan.FromMinutes(1), stoppingToken);
|
||||||
{
|
|
||||||
_logger.LogInformation("Worker running at: {time}", DateTimeOffset.Now);
|
|
||||||
}
|
|
||||||
await Task.Delay(1000, stoppingToken);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// Cleanup on shutdown
|
||||||
|
_logger.LogInformation("OversightService stopping...");
|
||||||
|
_taskScheduler?.Stop();
|
||||||
|
}
|
||||||
|
|
||||||
|
private AppConfig LoadConfig()
|
||||||
|
{
|
||||||
|
var configPath = Path.Combine(AppContext.BaseDirectory, "config.json");
|
||||||
|
|
||||||
|
if (!File.Exists(configPath))
|
||||||
|
{
|
||||||
|
throw new FileNotFoundException($"Config file not found at {configPath}");
|
||||||
|
}
|
||||||
|
|
||||||
|
var json = File.ReadAllText(configPath);
|
||||||
|
var config = Newtonsoft.Json.JsonConvert.DeserializeObject<AppConfig>(json);
|
||||||
|
|
||||||
|
if (config == null)
|
||||||
|
{
|
||||||
|
throw new InvalidOperationException("Failed to deserialize config.json");
|
||||||
|
}
|
||||||
|
|
||||||
|
return config;
|
||||||
|
}
|
||||||
|
|
||||||
|
private void InitializeTaskScheduler()
|
||||||
|
{
|
||||||
|
if (_config == null)
|
||||||
|
{
|
||||||
|
throw new InvalidOperationException("Config must be loaded before initializing scheduler");
|
||||||
|
}
|
||||||
|
|
||||||
|
_taskScheduler = new OsqueryTaskScheduler();
|
||||||
|
|
||||||
|
// Register patch compliance task if enabled
|
||||||
|
if (_config.PatchCompliance.Enabled)
|
||||||
|
{
|
||||||
|
var apiClient = new ApiClient(_config);
|
||||||
|
var patchTask = new PatchComplianceTask(_config, apiClient);
|
||||||
|
_taskScheduler.RegisterTask(patchTask);
|
||||||
|
|
||||||
|
_logger.LogInformation("Patch compliance task registered (interval: {hours} hours)",
|
||||||
|
_config.PatchCompliance.CheckIntervalHours);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Start the scheduler
|
||||||
|
_taskScheduler.Start();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
14
OversightService/config.json
Normal file
14
OversightService/config.json
Normal file
@@ -0,0 +1,14 @@
|
|||||||
|
{
|
||||||
|
"ServerUrl": "https://yourserver.com/api/status",
|
||||||
|
"EnableLogging": true,
|
||||||
|
"ClientIdentifier": "your-default-client-id",
|
||||||
|
"Auth": {
|
||||||
|
"Username": "testuser",
|
||||||
|
"Password": "testpassword"
|
||||||
|
},
|
||||||
|
"PatchCompliance": {
|
||||||
|
"Enabled": true,
|
||||||
|
"CheckIntervalHours": 24,
|
||||||
|
"LastCheckTime": null
|
||||||
|
}
|
||||||
|
}
|
||||||
BIN
OversightService/osqueryi.exe
Normal file
BIN
OversightService/osqueryi.exe
Normal file
Binary file not shown.
Reference in New Issue
Block a user