Our Security Platform          MSP360 Layer
─────────────────────          ─────────────
usb_alerter.py       ──────►  Backup USB audit logs to S3/Azure
threat_response.py   ──────►  Backup threat DB + response logs
Squid access logs    ──────►  Archive to Wasabi/Backblaze (cheap)
Admin databases      ──────►  Daily image backup + SQL backup
Employee portal data ──────►  Backed up with GFS retention
Windows endpoints    ──────►  Image-based bare-metal recovery
Linux servers        ──────►  File + image backup to any cloud
M365 email/files     ──────►  Cloud-to-cloud M365 backup module

#!/usr/bin/env python3
"""
MSP360 Backup Status Checker
Polls MSP360 API for backup job results and feeds into
our security platform dashboard and alerting
"""

import requests, json, sqlite3, os, smtplib
from datetime import datetime, timedelta
from email.mime.multipart import MIMEMultipart
from email.mime.text import MIMEText

# ── MSP360 API Config ─────────────────────────────────────────────────
MSP360_URL    = "https://api.mspbackups.com"
MSP360_USER   = "admin@company.com"
MSP360_PASS   = "your_msp360_password"

PLATFORM_DB   = "/var/lib/security-platform/db/backups.db"
SMTP_SERVER   = "smtp.company.com"
SMTP_PORT     = 587
SMTP_USER     = "it-security@company.com"
SMTP_PASS     = "your_smtp_pass"
IT_EMAIL      = "it-security@company.com"

os.makedirs(os.path.dirname(PLATFORM_DB), exist_ok=True)

def get_token():
    resp = requests.post(
        f"{MSP360_URL}/api/Accounts/login",
        json={"UserName": MSP360_USER, "Password": MSP360_PASS}
    )
    return resp.json().get("access_token","")

def get_backup_jobs(token):
    headers = {"Authorization": f"Bearer {token}"}
    resp    = requests.get(
        f"{MSP360_URL}/api/Computers",
        headers=headers
    )
    return resp.json() if resp.status_code == 200 else []

def get_job_history(token, computer_id):
    headers = {"Authorization": f"Bearer {token}"}
    resp    = requests.get(
        f"{MSP360_URL}/api/Computers/{computer_id}/History",
        headers=headers
    )
    return resp.json() if resp.status_code == 200 else []

def init_db():
    conn = sqlite3.connect(PLATFORM_DB)
    conn.execute("""
        CREATE TABLE IF NOT EXISTS backup_jobs (
            id           INTEGER PRIMARY KEY AUTOINCREMENT,
            computer     TEXT,
            plan_name    TEXT,
            status       TEXT,
            started      TEXT,
            finished     TEXT,
            size_gb      REAL,
            error        TEXT,
            synced_at    TEXT
        )""")
    conn.commit()
    conn.close()

def save_jobs(jobs):
    conn = sqlite3.connect(PLATFORM_DB)
    now  = datetime.now().isoformat()
    for j in jobs:
        conn.execute("""
            INSERT INTO backup_jobs
            (computer,plan_name,status,started,finished,size_gb,error,synced_at)
            VALUES (?,?,?,?,?,?,?,?)
        """, (
            j.get("computer",""),
            j.get("plan",""),
            j.get("status",""),
            j.get("started",""),
            j.get("finished",""),
            j.get("size_gb",0),
            j.get("error",""),
            now
        ))
    conn.commit()
    conn.close()

def alert_failed_backups(failed):
    if not failed:
        return
    rows = "".join(f"""
      <tr style='background:#3a1a1a'>
        <td style='padding:8px;color:#e74c3c'>{j['computer']}</td>
        <td style='padding:8px;color:#aaa'>{j['plan']}</td>
        <td style='padding:8px;color:#e74c3c'>{j['status']}</td>
        <td style='padding:8px;color:#888'>{j.get('error','')[:80]}</td>
      </tr>""" for j in failed)
    html = f"""
    <div style="font-family:sans-serif;max-width:620px;margin:auto">
      <div style="background:#c0392b;color:white;padding:16px 20px;
                  border-radius:8px 8px 0 0">
        <h2 style="margin:0">⚠️ Backup Failures Detected — MSP360</h2>
      </div>
      <div style="background:#f9f9f9;padding:20px;border:1px solid #ddd">
        <p>{len(failed)} backup job(s) failed in the last 24 hours.</p>
        <table style="width:100%;border-collapse:collapse;
                      margin-top:14px;background:#1a1d27">
          <tr style="background:#2c2f3e">
            <th style="padding:8px;color:#aaa;text-align:left">Computer</th>
            <th style="padding:8px;color:#aaa;text-align:left">Plan</th>
            <th style="padding:8px;color:#aaa;text-align:left">Status</th>
            <th style="padding:8px;color:#aaa;text-align:left">Error</th>
          </tr>
          {rows}
        </table>
        <p style="margin-top:16px;color:#999;font-size:0.85em">
          Review in MSP360 console: https://console.mspbackups.com
        </p>
      </div>
    </div>"""
    try:
        msg = MIMEMultipart("alternative")
        msg["Subject"] = f"⚠️ {len(failed)} MSP360 Backup Failures — {datetime.now().strftime('%Y-%m-%d')}"
        msg["From"]    = SMTP_USER
        msg["To"]      = IT_EMAIL
        msg.attach(MIMEText(html,"html"))
        with smtplib.SMTP(SMTP_SERVER, SMTP_PORT) as s:
            s.starttls()
            s.login(SMTP_USER, SMTP_PASS)
            s.sendmail(SMTP_USER, [IT_EMAIL], msg.as_string())
        print(f"[EMAIL] Alert sent: {len(failed)} failures")
    except Exception as e:
        print(f"[EMAIL ERROR] {e}")

def run():
    init_db()
    print("[*] Checking MSP360 backup status...")
    try:
        token     = get_token()
        computers = get_backup_jobs(token)
        all_jobs  = []
        failed    = []

        for computer in computers:
            cid  = computer.get("ComputerId","")
            name = computer.get("ComputerName","")
            hist = get_job_history(token, cid)

            for job in hist[:5]:   # last 5 jobs per machine
                status = job.get("Status","")
                entry  = {
                    "computer": name,
                    "plan":     job.get("PlanName",""),
                    "status":   status,
                    "started":  job.get("Started",""),
                    "finished": job.get("Finished",""),
                    "size_gb":  round(job.get("DataSize",0)/1e9, 2),
                    "error":    job.get("ErrorMessage",""),
                }
                all_jobs.append(entry)
                if status in ("Failed","Error","Warning"):
                    failed.append(entry)

        save_jobs(all_jobs)
        alert_failed_backups(failed)

        success = len(all_jobs) - len(failed)
        print(f"[✔] Checked {len(computers)} machines")
        print(f"    Success: {success}  Failed: {len(failed)}")

    except Exception as e:
        print(f"[ERROR] MSP360 check failed: {e}")

if __name__ == "__main__":
    run()

# Check backup status every 6 hours
echo "0 */6 * * * python3 /opt/security-platform/scripts/msp360_backup_check.py \
    >> /var/log/security-platform/msp360.log 2>&1" | sudo crontab -

# Linux agent install
wget https://download.msp360.com/latest/msp360-backup-linux.deb
sudo dpkg -i msp360-backup-linux.deb

# Register to MSP360 console
msp360backup --register \
    --user admin@company.com \
    --password your_password \
    --computer-name $(hostname)

# Create backup plan for platform data
msp360backup --create-plan \
    --name "Security Platform Data" \
    --destination s3://your-bucket/backups \
    --schedule daily \
    --time 02:00 \
    --retention 30 \
    --encrypt --password your_backup_key \
    --include /var/lib/security-platform \
    --include /opt/security-platform/scripts \
    --include /etc/squid \
    --include /etc/nginx \
    --include /var/log/security-platform