Merge pull request #905 from vxsh4d0w/master

Create PowerShell_Wireless_Network_Connections.mkape
EricZimmerman · Feb 27, 2024 · b1b1703 · b1b1703
2 parents 0dbfda8 + 8253a49
commit b1b1703
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/Modules/Windows/Powershell_Wireless_Network_Connections.mkape b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
@@ -0,0 +1,14 @@
+Description: Extract Wireless Network Connections details via powershell
+Category: LiveResponse
+Author: Vito Alfano
+Version: 1.0
+Id: 5021953e-b8b8-482d-8d23-a0f901dff84d
+ExportFormat: txt
+Processors:
+    -
+        Executable: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
+        CommandLine: -Command "(netsh wlan show profiles) | Select-String “\:(.+)$” | %{$name=$_.Matches.Groups[1].Value.Trim(); $_} | % {(netsh wlan show profile name=”$name” key=clear)} | Select-String “Key Content\W+\:(.+)$” | %{$pass=$_.Matches.Groups[1].Value.Trim(); $_} | %{[PSCustomObject]@{ SSID=$name;PASSWORD=$pass }} | Format-Table -AutoSize > %destinationDirectory%\Wireless_Network.txt"
+        ExportFormat: txt
+
+# Documentation
+# N/A