65 lines
2.3 KiB
C#
65 lines
2.3 KiB
C#
using System.Management;
|
|
|
|
namespace ITNexusAgent.Services;
|
|
|
|
public static class SecurityInfoService
|
|
{
|
|
public static string GetBitlockerStatus()
|
|
{
|
|
try
|
|
{
|
|
var scope = new ManagementScope(@"\\.\root\cimv2\Security\MicrosoftVolumeEncryption");
|
|
scope.Connect();
|
|
using var searcher = new ManagementObjectSearcher(scope,
|
|
new System.Management.ObjectQuery("SELECT * FROM Win32_EncryptableVolume WHERE DriveLetter='C:'"));
|
|
foreach (ManagementObject obj in searcher.Get())
|
|
{
|
|
var protection = Convert.ToInt32(obj["ProtectionStatus"]);
|
|
return protection switch
|
|
{
|
|
1 => "encrypted",
|
|
2 => "unknown",
|
|
_ => "off"
|
|
};
|
|
}
|
|
}
|
|
catch { }
|
|
return "unknown";
|
|
}
|
|
|
|
public static (bool Enabled, int SignaturesAgeDays, DateTime? LastScan) GetDefenderStatus()
|
|
{
|
|
try
|
|
{
|
|
var scope = new ManagementScope(@"\\.\root\Microsoft\Windows\Defender");
|
|
scope.Connect();
|
|
using var searcher = new ManagementObjectSearcher(scope,
|
|
new System.Management.ObjectQuery("SELECT * FROM MSFT_MpComputerStatus"));
|
|
foreach (ManagementObject obj in searcher.Get())
|
|
{
|
|
var enabled = Convert.ToBoolean(obj["AMServiceEnabled"] ?? false);
|
|
var sigDate = obj["AntivirusSignatureLastUpdated"]?.ToString();
|
|
var lastScanAge = Convert.ToInt32(obj["QuickScanAge"] ?? 999);
|
|
|
|
int sigAge = 0;
|
|
if (!string.IsNullOrEmpty(sigDate) && sigDate.Length >= 8)
|
|
{
|
|
if (DateTime.TryParseExact(sigDate[..14], "yyyyMMddHHmmss",
|
|
null, System.Globalization.DateTimeStyles.None, out var sigDateTime))
|
|
{
|
|
sigAge = (int)(DateTime.Now - sigDateTime).TotalDays;
|
|
}
|
|
}
|
|
|
|
DateTime? lastScan = lastScanAge < 999
|
|
? DateTime.Now.AddDays(-lastScanAge)
|
|
: null;
|
|
|
|
return (enabled, sigAge, lastScan);
|
|
}
|
|
}
|
|
catch { }
|
|
return (false, -1, null);
|
|
}
|
|
}
|