feature/234: Added check to verify exchange operation enabled for audit.

[juliusperez1695]

Pull Request Template

Description

Created function Get-HawkUserExchangeSearchQuery to pull audit on operation 'SearchQueryInitiatedExchange'. Additionally, an internal function Test-OperationEnabled was implemented to verify an operation is enabled for audit before attempting pull the associated logs.

Fixes # (issue)

Type of change

Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update

How Has This Been Tested?

Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration

• Test A
• Test B
• Unit test of Get-HawkUserExchangeSearchQuery and Get-HawkUserMailItemsAccessed to confirm expected output

Checklist:

• My code follows the style guidelines of Hawk
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules
• I have checked my code and corrected any misspellings