Package WAPT tis-audit-bitlocker 10.3-12 windows

tis-audit-bitlocker

10.3-12

Auditing TPM capabilities and if the drive C: is protected with BitLocker

2170 downloads

Download
See build result See VirusTotal scan

Description

package : tis-audit-bitlocker
name : Audit BitLocker
version : 10.3-12
categories : Security
maintainer : WAPT Team,Tranquil IT,Jimmy PELÉ,Pierre COSSON
installed_size :
editor :
licence :
signature_date : 2023-03-26T12:00:36.331052
size : 9.24 Ko
locale : all
target_os : windows
impacted_process :
architecture : all

control


package           : tis-audit-bitlocker
version           : 10.3-12
architecture      : all
section           : base
priority          : optional
name              : Audit BitLocker
categories        : Security
maintainer        : WAPT Team,Tranquil IT,Jimmy PELÉ,Pierre COSSON
description       : Auditing TPM capabilities and if the drive C: is protected with BitLocker
depends           : 
conflicts         : 
maturity          : PROD
locale            : all
target_os         : windows
min_wapt_version  : 2.1
sources           : 
installed_size    : 
impacted_process  : 
description_fr    : Vérification des capacités du TPM et si le lecteur C : est protégé avec BitLocker
description_pl    : Audyt możliwości TPM i czy dysk C: jest chroniony za pomocą BitLockera
description_de    : Überprüfen der TPM-Funktionen und ob das Laufwerk C: mit BitLocker geschützt ist
description_es    : Auditoría de las capacidades del TPM y si la unidad C: está protegida con BitLocker
description_pt    : Auditoria das capacidades do TPM e se a unidade C: estiver protegida com BitLocker
description_it    : Verifica delle funzionalità del TPM e se l'unità C: è protetta con BitLocker
description_nl    : Controle van TPM-mogelijkheden en of de schijf C: beveiligd is met BitLocker
description_ru    : Аудит возможностей TPM и того, защищен ли диск C: с помощью BitLocker
audit_schedule    : 
editor            : 
keywords          : 
licence           : 
homepage          : 
package_uuid      : 06597b85-21ae-48d9-b00b-2bb37d27c749
valid_from        : 
valid_until       : 
forced_install_on : 
changelog         : 
min_os_version    : 10.0
max_os_version    : 
icon_sha256sum    : 3a1498543ad768d473e33f581647f78006a84ffee91ff7c1bbec96dcce5b4124
signer            : Tranquil IT
signer_fingerprint: 8c5127a75392be9cc9afd0dbae1222a673072c308c14d88ab246e23832e8c6bb
signature         : TPE5l/Eaew5VVNp2FErry0Sn0+UTq6QtErwzw0BJEjRIF6pSaqhumI6qPA9T6txH4WNowgO70iXgjEXQGCn3cOIJuQuGC+aieci4KHa0c7W/VE7wlyV5+YJ0a2WN+Kl8MhKO93l8IDLTmoIeJaFi3OMOzvIOnzqLhBQ9SBWtgt4K1YGZMReYqhXeND5a+3PJnQ7I42MVewWHwnwj4TKlxj2GP38eeTsEE8fw/u61AGhaTxfCvYaQns2a3BGTUUT9fRW6L8wHOqRYA8gdXIaamGkMrmLwuEnlwZ2bqQdAV/i2H3onwkTiSmrL5tbAsmmLZkOE8iviuNfq2EboWo1RjA==
signature_date    : 2023-03-26T12:00:36.331052
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes

Setup.py


# -*- coding: utf-8 -*-
from setuphelpers import *


def install():
    pass


def audit():
    # Declaring local variables
    return_warning = False
    return_error = False

    res_tpm = run_powershell("Get-Tpm")
    if res_tpm["TpmPresent"] == False:
        print("ERROR: No TPM chip found on this system")
        return "ERROR"
    else:
        print("OK: TPM chip found on this system")
        if res_tpm["TpmReady"] == True:
            print("OK: TPM chip ready")
        else:
            print("WARNING: TPM chip not ready")
            return_warning = True

    mountpoint_list = ensure_list(run_powershell("(Get-BitLockerVolume).MountPoint"))

    # Cleaning mountpoints (unpartitionned devices and removal devices)
    for clean_mp in mountpoint_list:
        is_ignored = False
        if "?" in clean_mp:
            print("INFO: An unknow volume has been detected and will be skipped (%s)" % clean_mp)
            is_ignored = True
        if run_powershell("Get-Volume -DriveLetter %s | Where-Object DriveType -EQ Removable" % clean_mp.replace(":", "")):
            is_ignored = True
        if is_ignored:
            mountpoint_list.remove(clean_mp)

    for mountpoint in mountpoint_list:
        try:
            recovery_key = run_powershell("(Get-BitLockerVolume -MountPoint {}).KeyProtector.KeyProtectorId".format(mountpoint))
            if recovery_key:
                print("OK: {} recovery keys found".format(mountpoint))
                for mountpoint in mountpoint_list:
                    try:
                        for key_protectorid in run_powershell(
                            '(Get-BitLockerVolume -MountPoint "{}").KeyProtector.KeyProtectorId'.format(mountpoint)
                        ):
                            print("Storing: {} recovery key to the AD".format(key_protectorid))
                            run_powershell('Backup-BitLockerKeyProtector -MountPoint "{}" -KeyProtectorId "{}"'.format(mountpoint, key_protectorid))
                    except Exception as e:
                        print("WARNING: Failed to store recovery keys to the AD for: {}".format(mountpoint))
                        return_warning = True
        except:
            print("WARNING: Failed to recover {} mountpoint key".format(mountpoint))
            return_warning = True

    for mountpoint in mountpoint_list:
        if run_powershell("Get-BitLockerVolume -MountPoint %s | Select-Object -ExpandProperty ProtectionStatus" % mountpoint) == 0:
            print("ERROR: %s Drive is NOT encrypted with BitLocker" % mountpoint)
            return_error = True
        else:
            print("OK: %s Drive is encrypted with BitLocker" % mountpoint)

    if return_error:
        return "ERROR"

    if return_warning:
        return "WARNING"

    return "OK"

manifest.sha256


                                
ac47cd253412710cf385b59d3c6dd4aef76618185c7504d36522a165ce647301 : setup.py 
3a1498543ad768d473e33f581647f78006a84ffee91ff7c1bbec96dcce5b4124 : WAPT/icon.png 
a5a97261381e1d0ad46ee15916abec9c2631d0201f5cc50ceb0197a165a0bbbf : WAPT/certificate.crt 
2b948d457a3eb70aab3a82a4eefb808cec1d9f688d39e786c4da75a2974e9b01 : luti.json 
f698a3fd777e76a765ad3609fd88ec69e23650c78a34ce177c5a7e5bc1cf5a38 : WAPT/control

Choose languages

Choose architecture

Choose OS

Choose Categorie

Filter on package licensing

tis-audit-bitlocker

Description

control

Setup.py