PoerShell – CIAOPS

I have created a new script that uses the modern Microsoft Graph method to report all the Secure Score items and rather than me explaining what the script does I’ll turn it over to Github Copilot.

<Enter Github Copilot>

This PowerShell script, mggraph-ssdescpt-get.ps1, is designed to interact with the Microsoft Graph API to retrieve and display secure score results. Here’s a step-by-step explanation of its operation and function:

Start Transcript:

start-transcript “..\mggraph-ssdescpt-get.txt”

This line starts recording all commands and their output to a transcript file.
Check Microsoft Graph Connection:

try {

    $context = get-mgcontext -ErrorAction Stop

}

catch {

    write-host -foregroundcolor $errormessagecolor “Not connected to Microsoft Graph. Please connect to Microsoft Graph first using connect-mggraph`n”

if ($prompt) {stop-transcript}

exit

}

if (-not $context) {

    write-host -foregroundcolor $errormessagecolor “Not connected to Microsoft Graph. Please connect to Microsoft Graph first using connect-mggraph`n”

if ($prompt) {stop-transcript}

exit

}

write-host -foregroundcolor $processmessagecolor “Connected to Microsoft Graph”

write-host ” – Connected account =”,$context.Account,”`n”

if ($prompt) { pause }

This block checks if the Microsoft Graph module is installed and if the user is connected to Microsoft Graph. If not, it prompts the user to connect and exits the script.
Set API Endpoint and Method:

$uri = “https://graph.microsoft.com/beta/security/securescores”

$method = “GET”

write-host -foregroundcolor $processmessagecolor “Run Graph API Query”

The script sets the URI for the Microsoft Graph API endpoint to retrieve secure scores and specifies the HTTP method as GET.
Invoke API Request:

$query = Invoke-MgGraphRequest -Uri $URI -method $method -ErrorAction Stop

This line sends a request to the Microsoft Graph API to get secure score results.
Process and Display Results:

$names = $query.value[0].controlscores          # get the most current secure score results

$item = 0

write-host -foregroundcolor $processmessagecolor “Display results`n”

foreach ($control in $names) {

    $item++

    write-host -foregroundcolor green -BackgroundColor Black “`n*** Item”, $item, “***”

    write-host “Control Category     : “, $control.controlCategory

    write-host “Control Name         : “, $control.controlName

    write-host “Control Score        : “, $control.Score

    write-host “Control Description : “, $control.Description

    write-host “Control On           : “, $control.on

    write-host “Implementation status: “, $control.implementationstatus

    write-host “Score in percentage : “, $control.scoreinpercentage

    write-host “Last synced          : “, $control.lastsynced

    write-host “`n”

if ($prompt) { pause }

}

The script extracts the secure score results from the API response and iterates through each control score, displaying detailed information about each control.
Complete Script:

write-host -foregroundcolor $systemmessagecolor “`nScript Completed`n”

if ($prompt) {stop-transcript}

Finally, the script indicates completion and stops the transcript if the $prompt variable is set.

In summary, this script connects to Microsoft Graph, retrieves secure score data, and displays detailed information about each control score in the console.

Output