microsoft / CSS-Exchange

Exchange Server support tools and scripts
MIT License
1.21k stars 332 forks source link

TEST-AMSI. Added Logger Functions, FE Detection and IIS logs check #2036

Closed iserrano76 closed 3 months ago

iserrano76 commented 3 months ago

Issue: Move Test-AMSI to Logger functions. Added FE detection in case you use a shared name and Check IIS logs.

Reason: Improve the information and unify the logging functions.

Fix: Added logger functions. Analyze X-FEServer header of the request to check logs on the reached server. Collect the IIS logs configuration to search the request.

Validation: Test in lab: Test AMSI Original: image

New Version: image

Check Configuracion: Original: image

New Version: image

Additionaly now it creates log files: image