From cbc133e0c744cbf4ca75ee72065a82d6ef222e3b Mon Sep 17 00:00:00 2001
From: V <45754825+vxsh4d0w@users.noreply.github.com>
Date: Tue, 27 Feb 2024 12:04:15 +0000
Subject: [PATCH] Create Powershell_Wireless_Network_Connections.mkape

---
 .../Powershell_Wireless_Network_Connections.mkape  | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 Modules/Windows/Powershell_Wireless_Network_Connections.mkape

diff --git a/Modules/Windows/Powershell_Wireless_Network_Connections.mkape b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
new file mode 100644
index 000000000..459bd9fbb
--- /dev/null
+++ b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
@@ -0,0 +1,14 @@
+Description: Extract Wireless Network Connections details via powershell
+Category: LiveResponse
+Author: Vito Alfano
+Version: 1.0
+Id: 5021953e-b8b8-482d-8d23-a0f901dff84d
+ExportFormat: txt
+Processors:
+    -
+        Executable: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
+        CommandLine: (netsh wlan show profiles) | Select-String “\:(.+)$” | %{$name=$_.Matches.Groups[1].Value.Trim(); $_} | % {(netsh wlan show profile name=”$name” key=clear)} | Select-String “Key Content\W+\:(.+)$” | %{$pass=$_.Matches.Groups[1].Value.Trim(); $_} | %{[PSCustomObject]@{ SSID=$name;PASSWORD=$pass }} | Format-Table -AutoSize > %destinationDirectory%\Wireless_Network.txt
+        ExportFormat: txt
+
+# Documentation
+#