From cbc133e0c744cbf4ca75ee72065a82d6ef222e3b Mon Sep 17 00:00:00 2001
From: V <45754825+vxsh4d0w@users.noreply.github.com>
Date: Tue, 27 Feb 2024 12:04:15 +0000
Subject: [PATCH 1/3] Create Powershell_Wireless_Network_Connections.mkape

---
 .../Powershell_Wireless_Network_Connections.mkape  | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 Modules/Windows/Powershell_Wireless_Network_Connections.mkape

diff --git a/Modules/Windows/Powershell_Wireless_Network_Connections.mkape b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
new file mode 100644
index 000000000..459bd9fbb
--- /dev/null
+++ b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
@@ -0,0 +1,14 @@
+Description: Extract Wireless Network Connections details via powershell
+Category: LiveResponse
+Author: Vito Alfano
+Version: 1.0
+Id: 5021953e-b8b8-482d-8d23-a0f901dff84d
+ExportFormat: txt
+Processors:
+    -
+        Executable: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
+        CommandLine: (netsh wlan show profiles) | Select-String “\:(.+)$” | %{$name=$_.Matches.Groups[1].Value.Trim(); $_} | % {(netsh wlan show profile name=”$name” key=clear)} | Select-String “Key Content\W+\:(.+)$” | %{$pass=$_.Matches.Groups[1].Value.Trim(); $_} | %{[PSCustomObject]@{ SSID=$name;PASSWORD=$pass }} | Format-Table -AutoSize > %destinationDirectory%\Wireless_Network.txt
+        ExportFormat: txt
+
+# Documentation
+# 

From f846164a7254ec7871a37672694ec1cd556fa1d1 Mon Sep 17 00:00:00 2001
From: V <45754825+vxsh4d0w@users.noreply.github.com>
Date: Tue, 27 Feb 2024 12:07:50 +0000
Subject: [PATCH 2/3] Update Powershell_Wireless_Network_Connections.mkape

---
 Modules/Windows/Powershell_Wireless_Network_Connections.mkape | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Modules/Windows/Powershell_Wireless_Network_Connections.mkape b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
index 459bd9fbb..9b46a7346 100644
--- a/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
+++ b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
@@ -7,8 +7,8 @@ ExportFormat: txt
 Processors:
     -
         Executable: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
-        CommandLine: (netsh wlan show profiles) | Select-String “\:(.+)$” | %{$name=$_.Matches.Groups[1].Value.Trim(); $_} | % {(netsh wlan show profile name=”$name” key=clear)} | Select-String “Key Content\W+\:(.+)$” | %{$pass=$_.Matches.Groups[1].Value.Trim(); $_} | %{[PSCustomObject]@{ SSID=$name;PASSWORD=$pass }} | Format-Table -AutoSize > %destinationDirectory%\Wireless_Network.txt
+        CommandLine: -Command "(netsh wlan show profiles) | Select-String “\:(.+)$” | %{$name=$_.Matches.Groups[1].Value.Trim(); $_} | % {(netsh wlan show profile name=”$name” key=clear)} | Select-String “Key Content\W+\:(.+)$” | %{$pass=$_.Matches.Groups[1].Value.Trim(); $_} | %{[PSCustomObject]@{ SSID=$name;PASSWORD=$pass }} | Format-Table -AutoSize > %destinationDirectory%\Wireless_Network.txt"
         ExportFormat: txt
 
 # Documentation
-# 
+#

From 8253a492e76584a461fd0ad12f3266c143fb6dc5 Mon Sep 17 00:00:00 2001
From: Andrew Rathbun <36825567+AndrewRathbun@users.noreply.github.com>
Date: Tue, 27 Feb 2024 08:33:53 -0500
Subject: [PATCH 3/3] Update Powershell_Wireless_Network_Connections.mkape

---
 Modules/Windows/Powershell_Wireless_Network_Connections.mkape | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Modules/Windows/Powershell_Wireless_Network_Connections.mkape b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
index 9b46a7346..471a30475 100644
--- a/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
+++ b/Modules/Windows/Powershell_Wireless_Network_Connections.mkape
@@ -11,4 +11,4 @@ Processors:
         ExportFormat: txt
 
 # Documentation
-#
+# N/A