feat(library-files): ✨ Added Get-MdeLibraryFiles function

Author: itpropro

.github/workflows/ci.yml

@@ -64,8 +64,8 @@ jobs:
         continue-on-error: true
         run: |
           [xml]$coverage = Get-Content .\coverage.xml
-          [int]$covered = $coverage.report.counter | Where-Object type -eq 'INSTRUCTION' | select -ExpandProperty 'covered'
-          [int]$missed = $coverage.report.counter | Where-Object type -eq 'INSTRUCTION' | select -ExpandProperty 'missed'
+          [int]$covered = $coverage.report.counter | Where-Object type -eq 'METHOD' | select -ExpandProperty 'covered'
+          [int]$missed = $coverage.report.counter | Where-Object type -eq 'METHOD' | select -ExpandProperty 'missed'
           [int]$sum = $covered + $missed
           $coveredPercent = [Math]::Floor(($covered * 100 / $sum) * 100) / 100
           $readme = Get-Content ./README.md

src/PSMDE.psd1

@@ -84,6 +84,7 @@
     'Get-MdeConfigurationScore'
     'Get-MdeExposureScore'
     'Get-MdeExposureScoreByMachineGroups'
+    'Get-MdeLibraryFiles'
     'Get-MdeLiveResponseResult'
     'Get-MdeMachine'
     'Get-MdeMachineAction'

src/public/Get-MdeLibraryFiles.ps1

@@ -0,0 +1,34 @@
+<#
+.SYNOPSIS
+  List live response library files.
+
+.DESCRIPTION
+  List live response library files.
+
+.NOTES
+  Author: Jan-Henrik Damaschke
+
+.LINK
+  https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/list-library-files?view=o365-worldwide
+
+.EXAMPLE
+  Get-MdeLibraryFiles
+
+.ROLE
+  @(@{permission = 'Library.Manage'; permissionType = 'Application'}, @{permission = 'Library.Manage'; permissionType = 'Delegated'})
+#>
+
+function Get-MdeLibraryFiles {
+  [CmdletBinding()]
+  param ()
+  Begin {
+    if (-not (Test-MdePermissions -functionName $PSCmdlet.CommandRuntime)) {
+      $requiredRoles = (Get-Help $PSCmdlet.CommandRuntime -Full).role | Invoke-Expression
+      Throw "Missing required permission(s). Please check if one of these is in current token roles: $($requiredRoles.permission)"
+    }
+  }
+  Process {
+    return Invoke-AzureRequest -Uri "https://api.securitycenter.microsoft.com/api/libraryfiles"
+  }
+  End {}
+}

tests/public/Get-MdeLibraryFiles.Tests.ps1

@@ -0,0 +1,27 @@
+BeforeAll {
+  Remove-Module PSMDE -Force -ErrorAction SilentlyContinue
+  Import-Module (Split-Path $PSCommandPath).replace('tests', 'src').Replace('public', 'PSMDE.psd1')
+}
+
+Describe "Get-MdeLibraryFiles" {
+
+  It 'Should have the PSMDE module loaded' {
+    $module = Get-Module PSMDE
+    $module | Should -Not -BeNullOrEmpty
+  }
+
+  It 'Should have access to internal functions' {
+    InModuleScope PSMDE {
+      $cmd = Get-Command Invoke-RetryRequest
+      $cmd | Should -Not -BeNullOrEmpty
+    }
+  }
+
+  It 'Should correctly create the request uri' {
+    InModuleScope PSMDE {
+      Mock Invoke-AzureRequest { return $uri }
+      Mock Test-MdePermissions { return $true }
+      Get-MdeLibraryFiles | Should -Be "https://api.securitycenter.microsoft.com/api/libraryfiles"
+    }
+  }
+}