Automate File Inventory Scanning and Uploading to SharePoint using PowerShell and Intune

<#
.SYNOPSIS
    Client-side PowerShell file-inventory scanner for Windows devices.
.DESCRIPTION
    Scans all local filesystem drives for files matching a configurable search string or list of patterns.
    Optionally includes OneDrive for Business (per-user) locations.
    Outputs results to CSV and JSON, and writes a short log to the console.
    Supports configuration via a JSON file (C:\ProgramData\FileScanConfig.json) so you can update search criteria without changing the script deployed to clients.
.NOTES
    Usage: Deploy via Intune (PowerShell script) or run in SYSTEM/User context.
    Run using: powershell.exe -ExecutionPolicy Bypass -File "FileInventoryScanner.ps1" -SearchString "*google*"
#>

[CmdletBinding()]
param(
    [string]$SearchString = '',
    [string[]]$SearchPatterns = @(),
    [switch]$DisableOneDrive = $false,
    [string]$OutputFolder = "$env:ProgramData\FileInventory",
    [switch]$IncludeFileVersionInfo = $true,
    [switch]$VerboseLogging = $false
)

# Helper: Load config from JSON file if it exists
$ConfigPath = 'C:\ProgramData\FileScanConfig.json'
if (Test-Path -Path $ConfigPath) {
    try {
        $cfg = Get-Content -Path $ConfigPath -Raw | ConvertFrom-Json -ErrorAction Stop
        if ($null -ne $cfg.SearchString -and -not [string]::IsNullOrWhiteSpace($cfg.SearchString)) {
            $SearchString = $cfg.SearchString
        }
        if ($null -ne $cfg.SearchPatterns -and $cfg.SearchPatterns.Count -gt 0) {
            $SearchPatterns = $cfg.SearchPatterns
        }
        if ($cfg.DisableOneDrive -eq $true) {
            $DisableOneDrive = $true
        }
        if ($null -ne $cfg.OutputFolder -and -not [string]::IsNullOrWhiteSpace($cfg.OutputFolder)) {
            $OutputFolder = $cfg.OutputFolder
        }
    }
    catch {
        Write-Verbose "Failed to load config $ConfigPath : $_"
    }
}

# If user provided only a SearchString, build wildcard pattern
if (($SearchPatterns -eq $null) -or ($SearchPatterns.Count -eq 0)) {
    if (-not [string]::IsNullOrWhiteSpace($SearchString)) {
        $SearchPatterns = @("*$SearchString*")
    }
    else {
        Write-Host "No search string/pattern provided. Provide -SearchString or deploy a config file to $ConfigPath." -ForegroundColor Yellow
        exit 2
    }
}

# Ensure output folder exists
try {
    New-Item -Path $OutputFolder -ItemType Directory -Force | Out-Null
}
catch { }

$Hostname = $env:COMPUTERNAME
$Now = Get-Date -Format 'yyyyMMdd_HHmmss'
$CsvPath = Join-Path -Path $OutputFolder -ChildPath "FileInventory_${Hostname}_$Now.csv"
$JsonPath = Join-Path -Path $OutputFolder -ChildPath "FileInventory_${Hostname}_$Now.json"

# Build list of root paths to search (all file-system PSDrives)
$fsDrives = Get-PSDrive -PSProvider FileSystem | Where-Object { $_.Root -and (Test-Path -Path $_.Root) }
$rootPaths = @()
foreach ($d in $fsDrives) {
    $rootPaths += $d.Root
}

# Add OneDrive folders if not disabled and running in user context
$includeOneDrive = -not $DisableOneDrive
if ($includeOneDrive) {
    if ($env:USERNAME -and $env:USERNAME -ne 'SYSTEM') {
        $oneDriveCandidates = @(
            "$env:USERPROFILE\OneDrive",
            "$env:USERPROFILE\OneDrive - *",
            "$env:USERPROFILE\OneDrive - * - Personal"
        )
        foreach ($p in $oneDriveCandidates) {
            try {
                $resolved = Get-ChildItem -Path $p -Directory -ErrorAction SilentlyContinue | ForEach-Object { $_.FullName }
                if ($resolved) {
                    $rootPaths += $resolved
                }
            }
            catch { }
        }
    }
    else {
        Write-Verbose "OneDrive scan requested but running as SYSTEM or cannot access profile. Skipping OneDrive paths." -Verbose:$VerboseLogging
    }
}

# Deduplicate
$rootPaths = $rootPaths | Sort-Object -Unique
Write-Host "Scanning $($rootPaths.Count) root path(s) for patterns: $($SearchPatterns -join ', ')" -ForegroundColor Cyan

$results = [System.Collections.Generic.List[PSObject]]::new()

# Function to build result object
function New-ResultObject {
    param($fileInfo, $fileVersion)

    $owner = $null
    if ($null -ne $fileInfo.FullName) {
        try {
            $owner = (Get-Acl -LiteralPath $fileInfo.FullName -ErrorAction Stop).Owner
        }
        catch {
            $owner = $null
        }
    }

    [PSCustomObject]@{
        Hostname        = $Hostname
        FileName        = $fileInfo.Name
        FullName        = $fileInfo.FullName
        FilePath        = $fileInfo.DirectoryName
        SizeBytes       = $fileInfo.Length
        DateCreated     = $fileInfo.CreationTimeUtc.ToString('o')
        DateAccessed    = $fileInfo.LastAccessTimeUtc.ToString('o')
        DateModified    = $fileInfo.LastWriteTimeUtc.ToString('o')
        Owner           = $owner
        ProductName     = $fileVersion.ProductName
        ProductVersion  = $fileVersion.ProductVersion
        FileDescription = $fileVersion.FileDescription
        ScanTimestamp   = (Get-Date).ToString('o')
    }
}

# Start scanning
foreach ($root in $rootPaths) {
    foreach ($pattern in $SearchPatterns) {
        Write-Verbose "Searching root: $root pattern: $pattern" -Verbose:$VerboseLogging
        try {
            $files = Get-ChildItem -LiteralPath $root -Filter $pattern -File -Recurse -ErrorAction SilentlyContinue
        }
        catch {
            try {
                $files = Get-ChildItem -LiteralPath $root -File -Recurse -ErrorAction SilentlyContinue | Where-Object { $_.Name -like $pattern }
            }
            catch {
                Write-Verbose "Failed to enumerate $root : $_" -Verbose:$VerboseLogging
                continue
            }
        }

        foreach ($f in $files) {
            $fv = [PSCustomObject]@{
                ProductName     = $null
                ProductVersion  = $null
                FileDescription = $null
            }
            if ($IncludeFileVersionInfo) {
                try {
                    $vi = [System.Diagnostics.FileVersionInfo]::GetVersionInfo($f.FullName)
                    $fv.ProductName     = $vi.ProductName
                    $fv.ProductVersion  = $vi.ProductVersion
                    $fv.FileDescription = $vi.FileDescription
                }
                catch { }
            }
            $results.Add((New-ResultObject -fileInfo $f -fileVersion $fv))
        }
    }
}

# Write outputs
$resultsArray = $results.ToArray()
try {
    if ($resultsArray.Count -gt 0) {
        $resultsArray | Export-Csv -Path $CsvPath -NoTypeInformation -Force
        $resultsArray | ConvertTo-Json -Depth 5 | Out-File -FilePath $JsonPath -Encoding UTF8 -Force
        Write-Host "Found $($resultsArray.Count) matching file(s). CSV -> $CsvPath JSON -> $JsonPath" -ForegroundColor Green
    }
    else {
        Write-Host "No matching files found." -ForegroundColor Yellow
    }
}
catch {
    Write-Host "Failed to write output: $_" -ForegroundColor Red
}

# Audit log entry
$AuditFile = Join-Path -Path $OutputFolder -ChildPath "FileInventory_Audit.log"
$summary = "$(Get-Date -Format o) - Host:$Hostname - Patterns:$($SearchPatterns -join ',') - Results:$($resultsArray.Count) - OutputCSV:$CsvPath"
Add-Content -Path $AuditFile -Value $summary -ErrorAction SilentlyContinue

# Show sample in console
if ($resultsArray.Count -gt 0) {
    $resultsArray | Select-Object Hostname, FileName, FullName, ProductName, ProductVersion, FileDescription, FilePath, DateCreated, DateAccessed | Select-Object -First 20 | Format-Table -AutoSize
}

exit 0

<#
.SYNOPSIS
    File inventory scanner and uploader to SharePoint Online via Microsoft Graph API.
.DESCRIPTION
    Scans local filesystem (and optionally OneDrive folders) for matching files.
    Saves results to CSV and JSON.
    Uploads CSV result to SharePoint Online via Microsoft Graph API createUploadSession.
.NOTES
    Author: TechEUC
#>

[CmdletBinding()]
param(
    [string]$SearchString = '',
    [string[]]$SearchPatterns = @(),
    [switch]$DisableOneDrive = $false,
    [string]$OutputFolder = "$env:ProgramData\FileInventory",
    [switch]$IncludeFileVersionInfo = $true,
    [switch]$VerboseLogging = $false
)

# 1. Load Config (if exists)
$ConfigPath = 'C:\ProgramData\FileScanConfig.json'
if (Test-Path -Path $ConfigPath) {
    try {
        $cfg = Get-Content -Path $ConfigPath -Raw | ConvertFrom-Json -ErrorAction Stop
        if ($null -ne $cfg.SearchString -and -not [string]::IsNullOrWhiteSpace($cfg.SearchString)) {
            $SearchString = $cfg.SearchString
        }
        if ($null -ne $cfg.SearchPatterns -and $cfg.SearchPatterns.Count -gt 0) {
            $SearchPatterns = $cfg.SearchPatterns
        }
        if ($cfg.DisableOneDrive -eq $true) {
            $DisableOneDrive = $true
        }
        if ($null -ne $cfg.OutputFolder -and -not [string]::IsNullOrWhiteSpace($cfg.OutputFolder)) {
            $OutputFolder = $cfg.OutputFolder
        }
    }
    catch {
        Write-Verbose "Failed to load config $ConfigPath : $_"
    }
}

if (($SearchPatterns -eq $null) -or ($SearchPatterns.Count -eq 0)) {
    if (-not [string]::IsNullOrWhiteSpace($SearchString)) {
        $SearchPatterns = @("*$SearchString*")
    }
    else {
        Write-Host "No search string or pattern provided." -ForegroundColor Yellow
        exit 2
    }
}

# 2. Prepare Output Paths
try {
    New-Item -Path $OutputFolder -ItemType Directory -Force | Out-Null
}
catch { }

$Hostname = $env:COMPUTERNAME
$Now = Get-Date -Format 'yyyyMMdd_HHmmss'
$CsvPath = Join-Path -Path $OutputFolder -ChildPath "FileInventory_${Hostname}_$Now.csv"
$JsonPath = Join-Path -Path $OutputFolder -ChildPath "FileInventory_${Hostname}_$Now.json"

# 3. Build Search Paths
$fsDrives = Get-PSDrive -PSProvider FileSystem | Where-Object { $_.Root -and (Test-Path -Path $_.Root) }
$rootPaths = $fsDrives.Root

if (-not $DisableOneDrive -and $env:USERNAME -and $env:USERNAME -ne 'SYSTEM') {
    $oneDriveCandidates = @(
        "$env:USERPROFILE\OneDrive",
        "$env:USERPROFILE\OneDrive - *",
        "$env:USERPROFILE\OneDrive - * - Personal"
    )
    foreach ($p in $oneDriveCandidates) {
        $resolved = Get-ChildItem -Path $p -Directory -ErrorAction SilentlyContinue | ForEach-Object { $_.FullName }
        if ($resolved) {
            $rootPaths += $resolved
        }
    }
}

$rootPaths = $rootPaths | Sort-Object -Unique
Write-Host "Scanning $($rootPaths.Count) root path(s) for patterns: $($SearchPatterns -join ', ')" -ForegroundColor Cyan

# 4. Perform File Scan
$results = [System.Collections.Generic.List[PSObject]]::new()

function New-ResultObject {
    param($fileInfo, $fileVersion)
    $owner = $null
    try {
        $owner = (Get-Acl -LiteralPath $fileInfo.FullName -ErrorAction Stop).Owner
    }
    catch { }

    [PSCustomObject]@{
        Hostname        = $env:COMPUTERNAME
        FileName        = $fileInfo.Name
        FullName        = $fileInfo.FullName
        FilePath        = $fileInfo.DirectoryName
        SizeBytes       = $fileInfo.Length
        DateCreated     = $fileInfo.CreationTimeUtc.ToString('o')
        DateAccessed    = $fileInfo.LastAccessTimeUtc.ToString('o')
        DateModified    = $fileInfo.LastWriteTimeUtc.ToString('o')
        Owner           = $owner
        ProductName     = $fileVersion.ProductName
        ProductVersion  = $fileVersion.ProductVersion
        FileDescription = $fileVersion.FileDescription
        ScanTimestamp   = (Get-Date).ToString('o')
    }
}

foreach ($root in $rootPaths) {
    foreach ($pattern in $SearchPatterns) {
        try {
            $files = Get-ChildItem -LiteralPath $root -Filter $pattern -File -Recurse -ErrorAction SilentlyContinue
        }
        catch {
            $files = Get-ChildItem -LiteralPath $root -File -Recurse -ErrorAction SilentlyContinue | Where-Object { $_.Name -like $pattern }
        }

        foreach ($f in $files) {
            $fv = [PSCustomObject]@{
                ProductName     = $null
                ProductVersion  = $null
                FileDescription = $null
            }
            if ($IncludeFileVersionInfo) {
                try {
                    $vi = [System.Diagnostics.FileVersionInfo]::GetVersionInfo($f.FullName)
                    $fv.ProductName     = $vi.ProductName
                    $fv.ProductVersion  = $vi.ProductVersion
                    $fv.FileDescription = $vi.FileDescription
                }
                catch { }
            }
            $results.Add((New-ResultObject -fileInfo $f -fileVersion $fv))
        }
    }
}

# 5. Write Outputs
if ($results.Count -gt 0) {
    $results | Export-Csv -Path $CsvPath -NoTypeInformation -Force
    $results | ConvertTo-Json -Depth 5 | Out-File -FilePath $JsonPath -Encoding UTF8 -Force
    Write-Host "Found $($results.Count) file(s). CSV saved to $CsvPath" -ForegroundColor Green
}
else {
    Write-Host "No matching files found." -ForegroundColor Yellow
}

# 6. Upload to SharePoint via Microsoft Graph API
Write-Host "Uploading results to SharePoint Online..." -ForegroundColor Cyan

$Tenant = "YOUR_TENANT_NAME"
$ClientID = "YOUR_CLIENT_ID"
$Secret = "YOUR_CLIENT_SECRET"
$SharePoint_SiteID = "YOUR_SITE_ID"
$SharePoint_Path = "https://yourtenant.sharepoint.com/sites/YourSite/Shared%20Documents"
$SharePoint_ExportFolder = "FileScanResults"

$Body = @{
    client_id     = $ClientID
    client_secret = $Secret
    scope         = "https://graph.microsoft.com/.default"
    grant_type    = 'client_credentials'
}

$Graph_Url = "https://login.microsoftonline.com/$Tenant.onmicrosoft.com/oauth2/v2.0/token"
$Token = Invoke-RestMethod -Uri $Graph_Url -Method Post -Body $Body
$Access_token = $Token.access_token
$Header = @{
    Authorization  = "Bearer $Access_token"
    "Content-Type" = "application/json"
}

$SharePoint_Graph_URL = "https://graph.microsoft.com/v1.0/sites/$SharePoint_SiteID/drives"
$Result = Invoke-RestMethod -Uri $SharePoint_Graph_URL -Method GET -Headers $Header
$DriveID = $Result.value | Where-Object { $_.webURL -eq $SharePoint_Path } | Select-Object -ExpandProperty id

$FileName = Split-Path -Path $CsvPath -Leaf
$UploadSessionUri = "https://graph.microsoft.com/v1.0/sites/${SharePoint_SiteID}/drives/${DriveID}/root:/${SharePoint_ExportFolder}/${FileName}:/createUploadSession"
$UploadSession = Invoke-RestMethod -Uri $UploadSessionUri -Method POST -Headers $Header -ContentType "application/json"

$fileBytes = [System.IO.File]::ReadAllBytes($CsvPath)
$fileLength = $fileBytes.Length
$headers = @{
    'Content-Range' = "bytes 0-$($fileLength-1)/$fileLength"
}

Invoke-RestMethod -Method Put -Uri $UploadSession.uploadUrl -Body $fileBytes -Headers $headers
Write-Host "Successfully uploaded $FileName to SharePoint folder '$SharePoint_ExportFolder'" -ForegroundColor Green

# 7. Audit Logging
$AuditFile = Join-Path -Path $OutputFolder -ChildPath "FileInventory_Audit.log"
$summary = "$(Get-Date -Format o) - Host:$Hostname - Results:$($results.Count) - OutputCSV:$CsvPath - UploadedTo:$SharePoint_ExportFolder"
Add-Content -Path $AuditFile -Value $summary -ErrorAction SilentlyContinue

exit 0