From 20651dba077596eb2cbdcadbd260b0d9e7c131b6 Mon Sep 17 00:00:00 2001
From: vm-packages <vm-packages@mandiant.com>
Date: Tue, 31 Oct 2023 07:23:10 +0000
Subject: [PATCH] Add egress-assess.vm

Closes https://github.com/mandiant/VM-Packages/issues/593.
---
 packages/egress-assess.vm/egress-assess.vm.nuspec    | 12 ++++++++++++
 .../egress-assess.vm/tools/chocolateyinstall.ps1     | 10 ++++++++++
 .../egress-assess.vm/tools/chocolateyuninstall.ps1   |  7 +++++++
 3 files changed, 29 insertions(+)
 create mode 100644 packages/egress-assess.vm/egress-assess.vm.nuspec
 create mode 100644 packages/egress-assess.vm/tools/chocolateyinstall.ps1
 create mode 100644 packages/egress-assess.vm/tools/chocolateyuninstall.ps1

diff --git a/packages/egress-assess.vm/egress-assess.vm.nuspec b/packages/egress-assess.vm/egress-assess.vm.nuspec
new file mode 100644
index 000000000..75e55c27a
--- /dev/null
+++ b/packages/egress-assess.vm/egress-assess.vm.nuspec
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
+  <metadata>
+    <id>egress-assess.vm</id>
+    <version>0.0.0.20240412</version>
+    <authors>RedSiege</authors>
+    <description>Egress-Assess is a tool used to test egress data detection capabilities.</description>
+    <dependencies>
+      <dependency id="common.vm" version="0.0.0.20240412" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/packages/egress-assess.vm/tools/chocolateyinstall.ps1 b/packages/egress-assess.vm/tools/chocolateyinstall.ps1
new file mode 100644
index 000000000..f2db1923e
--- /dev/null
+++ b/packages/egress-assess.vm/tools/chocolateyinstall.ps1
@@ -0,0 +1,10 @@
+$ErrorActionPreference = 'Stop'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'Egress-Assess'
+$category = 'Reconnaissance'
+
+$zipUrl = 'https://github.com/RedSiege/Egress-Assess/archive/8843e3c209df6c585af0b81b4751126004ff0f99.zip'
+$zipSha256 = '97d5597c50eb8b394f98119ea25987ec4f7e82d93894fdfb51d1a84b427ed6f6'
+
+VM-Install-From-Zip $toolName $category $zipUrl $zipSha256 -withoutBinFile -innerFolder $true
diff --git a/packages/egress-assess.vm/tools/chocolateyuninstall.ps1 b/packages/egress-assess.vm/tools/chocolateyuninstall.ps1
new file mode 100644
index 000000000..2c521a26d
--- /dev/null
+++ b/packages/egress-assess.vm/tools/chocolateyuninstall.ps1
@@ -0,0 +1,7 @@
+$ErrorActionPreference = 'Continue'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'Egress-Assess'
+$category = 'Reconnaissance'
+
+VM-Uninstall $toolName $category