Windows Monitor - Security Center Script

<#
This resource is provided as a convenience for Level users. We cannot 
guarantee it will work in all environments. Please test before deploying 
to your production environment. We welcome contributions to our community 
library

Level Library
https://level.io/library/script-windows-monitor-av
#>

# Initialize a variable to track the overall security health
$securityHealthOk = $true

# Function to check the security health status from the Security Center
function Check-SecurityHealth {
    try {
        # Check Antivirus status
        $antivirusProducts = Get-WmiObject -Namespace "ROOT\SecurityCenter2" -Class "AntiVirusProduct"
        if ($antivirusProducts) {
            foreach ($product in $antivirusProducts) {
                Write-Host "Antivirus Name: $($product.displayName)"
                # Interpret productState for demonstration; you may need specific checks here
                if ($product.productState -match "262144" -or $product.productState -match "266240") {
                    Write-Host "Antivirus Status: Enabled and up to date"
                }
                else {
                    Write-Host "Antivirus Status: Disabled or out of date"
                    $global:securityHealthOk = $false
                }
            }
        }
        else {
            Write-Host "No Antivirus product detected."
            $global:securityHealthOk = $false
        }

        # Check Firewall status
        $firewallProducts = Get-WmiObject -Namespace "ROOT\SecurityCenter2" -Class "FirewallProduct"
        if ($firewallProducts) {
            foreach ($product in $firewallProducts) {
                Write-Host "Firewall Name: $($product.displayName)"
                # Example check; adjust based on actual requirements
                if ($product.productState -match "262144") {
                    Write-Host "Firewall Status: Enabled"
                }
                else {
                    Write-Host "Firewall Status: Disabled"
                    $global:securityHealthOk = $false
                }
            }
        }
        else {
            Write-Host "No Firewall product detected."
            $global:securityHealthOk = $false
        }

        # Check for other security products as needed...

    }
    catch {
        Write-Host "An error occurred querying the Security Center."
        $global:securityHealthOk = $false
    }
}

# Execute the security health check
Check-SecurityHealth

# Determine script exit based on overall security health
if ($securityHealthOk) {
    Write-Host "SUCCESS: All security features are active and in good standing."
    exit 0
}
else {
    Write-Host "ERROR: One or more security features are disabled or in a bad state."
    exit 1
}