Virtual Geek

Not sure about query, but will be including the subdomains.

briliant script. Thank youj

Hello and thanks for this Script! Is there anyway you can put in code so that it will include subdomains?

thanks much!

Hi,

@Mike: Thanks for that solution! It helped me a lot.

As cyberbastion mentioned source / destination and source port / destination port can contain multiple values. I modified your script to address that. The complete modified script can be found below. I used semicolon to separate these multiple values because I export the whole report to CSV.

$report = @()

foreach ($nsg in Get-AzureRmNetworkSecurityGroup){

foreach($rule in $nsg.SecurityRules){

$info = "" | select-object nsg, rule, description, protocol, SourcePortRange, DestinationPortRange, SourceApplicationSecurityGroups, DestinationApplicationSecurityGroups, SourceAddressPrefix, DestinationAddressPrefix, Access, Priority, Direction
$info.nsg = $nsg.Name
$info.rule = $rule.name
$info.Description = $rule.Description
$info.Protocol = $rule.Protocol

foreach ($sport in $rule.SourcePortRange) {

if ($sport -ne $rule.SourcePortRange[0]) {

$sport=";" + $sport

}

$info.SourcePortRange += $sport

}

foreach ($dport in $rule.DestinationPortRange) {

if ($dport -ne $rule.DestinationPortRange[0]) {

$dport=";" + $dport

}

$info.DestinationPortRange += $dport

}

foreach ($sprefix in $rule.SourceAddressPrefix) {

if ($sprefix -ne $rule.SourceAddressPrefix[0]) {

$sprefix=";" + $sprefix

}

$info.SourceAddressPrefix += $sprefix

}

foreach ($dprefix in $rule.DestinationAddressPrefix) {

if ($dprefix -ne $rule.DestinationAddressPrefix[0]) {

$dprefix=";" + $dprefix

}

$info.DestinationAddressPrefix += $dprefix

}

$info.SourceApplicationSecurityGroups = $rule.SourceApplicationSecurityGroups[0]
$info.DestinationApplicationSecurityGroups = $rule.DestinationApplicationSecurityGroups[0]
$info.Access = $rule.Access
$info.Priority = $rule.Priority
$info.Direction = $rule.Direction

$report += $info
}
}

$report

Quick question now that we have created items in their own thread, how can I do an invoke-command or start-process to open a folder or .exe. When I run this now I never see this since it's on a background thread.