Examples with PSCommand fvarrui.sysadmin.challenger.command.PSCommand used on opensource projects

Example 1 with PSCommand

use of fvarrui.sysadmin.challenger.command.PSCommand in project Challenger4SysAdmins by fvarrui.

the class PSMonitor method doWork.

@Override
public void doWork() {
    String resolveUsernameCommand = "";
    Command resolveUsername = new PSCommand("(Get-LocalUser | Where SID -eq '%s').Name");
    ZonedDateTime dateTime = ZonedDateTime.now(ZoneOffset.UTC);
    Chronometer chrono = new Chronometer();
    do {
        chrono.init();
        ExecutionResult result = command.execute(dateTime.toString());
        if (!result.getOutput().isEmpty()) {
            String xml = "<Events>" + result.getOutput() + "</Events>";
            Document doc = XMLUtils.stringToDocument(xml);
            NodeList nodes = doc.getElementsByTagName("Event");
            for (int i = 0; i < nodes.getLength(); i++) {
                Node node = nodes.item(i);
                String command = XMLUtils.searchText(node, "EventData/Data[@Name='ScriptBlockText']");
                String userId = XMLUtils.searchAttribute(node, "System/Security", "UserID");
                String xmlDateTime = XMLUtils.searchAttribute(node, "System/TimeCreated", "SystemTime");
                ZonedDateTime timestamp = DateTimeUtils.xmlInstantToZonedDateTime(xmlDateTime);
                if (!getExcludedCommands().contains(command) && !command.equals(resolveUsernameCommand)) {
                    ExecutionResult usernameResult = resolveUsername.execute(userId);
                    resolveUsernameCommand = usernameResult.getParams();
                    String username = usernameResult.getOutput();
                    Map<String, Object> data = new HashMap<>();
                    data.put(COMMAND, command);
                    data.put(USERNAME, username);
                    data.put(TIMESTAMP, LocalDateTime.ofInstant(timestamp.toInstant(), ZoneId.systemDefault()));
                    notifyAll(data);
                }
                dateTime = timestamp;
            }
        }
        chrono.stop();
        Sleep.millis(delay - chrono.getDiff());
    } while (!isStopped());
}