Skip to content
This repository has been archived by the owner on Nov 16, 2023. It is now read-only.

Commit

Permalink
Update wifikeys.txt
Browse files Browse the repository at this point in the history
  • Loading branch information
@tali-ash
tali-ash authored Apr 22, 2020
1 parent ebeaa58 commit 35a3d6e
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions General queries/wifikeys.txt
View file
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
// WIFI Keys
// List commands the exposed WIFI Keys
// @mattiasborg82
// blog.sec-labs.com
ProcessCreationEvents
| where EventTime > ago(7d)
DeviceProcessEvents
| where Timestamp > ago(7d)
| where ProcessCommandLine startswith "netsh.exe"
| where ProcessCommandLine has "key=clear"
| project EventTime, ComputerName, InitiatingProcessFileName, FileName, ProcessCommandLine
| top 100 by EventTime
| project Timestamp, DeviceName, InitiatingProcessFileName, FileName, ProcessCommandLine
| top 100 by Timestamp

0 comments on commit 35a3d6e

Please sign in to comment.