Create Powershell_Wireless_Network_Connections.mkape

EricZimmerman · Feb 27, 2024 · cbc133e · cbc133e
1 parent 0dbfda8
commit cbc133e
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/Modules/Windows/Powershell_Wireless_Network_Connections.mkape b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
@@ -0,0 +1,14 @@
+Description: Extract Wireless Network Connections details via powershell
+Category: LiveResponse
+Author: Vito Alfano
+Version: 1.0
+Id: 5021953e-b8b8-482d-8d23-a0f901dff84d
+ExportFormat: txt
+Processors:
+    -
+        Executable: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
+        CommandLine: (netsh wlan show profiles) | Select-String “\:(.+)$” | %{$name=$_.Matches.Groups[1].Value.Trim(); $_} | % {(netsh wlan show profile name=”$name” key=clear)} | Select-String “Key Content\W+\:(.+)$” | %{$pass=$_.Matches.Groups[1].Value.Trim(); $_} | %{[PSCustomObject]@{ SSID=$name;PASSWORD=$pass }} | Format-Table -AutoSize > %destinationDirectory%\Wireless_Network.txt
+        ExportFormat: txt
+
+# Documentation
+#