diff --git a/Modules/Windows/Powershell_Wireless_Network_Connections.mkape b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape new file mode 100644 index 000000000..471a30475 --- /dev/null +++ b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape @@ -0,0 +1,14 @@ +Description: Extract Wireless Network Connections details via powershell +Category: LiveResponse +Author: Vito Alfano +Version: 1.0 +Id: 5021953e-b8b8-482d-8d23-a0f901dff84d +ExportFormat: txt +Processors: + - + Executable: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe + CommandLine: -Command "(netsh wlan show profiles) | Select-String “\:(.+)$” | %{$name=$_.Matches.Groups[1].Value.Trim(); $_} | % {(netsh wlan show profile name=”$name” key=clear)} | Select-String “Key Content\W+\:(.+)$” | %{$pass=$_.Matches.Groups[1].Value.Trim(); $_} | %{[PSCustomObject]@{ SSID=$name;PASSWORD=$pass }} | Format-Table -AutoSize > %destinationDirectory%\Wireless_Network.txt" + ExportFormat: txt + +# Documentation +# N/A