Initial commit: IT Nexus Web-App

agent-cs/Services/SecurityInfoService.cs

@@ -0,0 +1,64 @@
+using System.Management;
+
+namespace ITNexusAgent.Services;
+
+public static class SecurityInfoService
+{
+    public static string GetBitlockerStatus()
+    {
+        try
+        {
+            var scope = new ManagementScope(@"\\.\root\cimv2\Security\MicrosoftVolumeEncryption");
+            scope.Connect();
+            using var searcher = new ManagementObjectSearcher(scope,
+                new System.Management.ObjectQuery("SELECT * FROM Win32_EncryptableVolume WHERE DriveLetter='C:'"));
+            foreach (ManagementObject obj in searcher.Get())
+            {
+                var protection = Convert.ToInt32(obj["ProtectionStatus"]);
+                return protection switch
+                {
+                    1 => "encrypted",
+                    2 => "unknown",
+                    _ => "off"
+                };
+            }
+        }
+        catch { }
+        return "unknown";
+    }
+
+    public static (bool Enabled, int SignaturesAgeDays, DateTime? LastScan) GetDefenderStatus()
+    {
+        try
+        {
+            var scope = new ManagementScope(@"\\.\root\Microsoft\Windows\Defender");
+            scope.Connect();
+            using var searcher = new ManagementObjectSearcher(scope,
+                new System.Management.ObjectQuery("SELECT * FROM MSFT_MpComputerStatus"));
+            foreach (ManagementObject obj in searcher.Get())
+            {
+                var enabled = Convert.ToBoolean(obj["AMServiceEnabled"] ?? false);
+                var sigDate = obj["AntivirusSignatureLastUpdated"]?.ToString();
+                var lastScanAge = Convert.ToInt32(obj["QuickScanAge"] ?? 999);
+
+                int sigAge = 0;
+                if (!string.IsNullOrEmpty(sigDate) && sigDate.Length >= 8)
+                {
+                    if (DateTime.TryParseExact(sigDate[..14], "yyyyMMddHHmmss",
+                        null, System.Globalization.DateTimeStyles.None, out var sigDateTime))
+                    {
+                        sigAge = (int)(DateTime.Now - sigDateTime).TotalDays;
+                    }
+                }
+
+                DateTime? lastScan = lastScanAge < 999
+                    ? DateTime.Now.AddDays(-lastScanAge)
+                    : null;
+
+                return (enabled, sigAge, lastScan);
+            }
+        }
+        catch { }
+        return (false, -1, null);
+    }
+}