CrowdStrike_RTR_Powershell_Scripts icon indicating copy to clipboard operation
CrowdStrike_RTR_Powershell_Scripts copied to clipboard

RECON_IR add first/title of users

Open freeload101 opened this issue 1 year ago • 0 comments

not working ..

echo '-------------------------'; echo "[+] INFO: Atempting to fetch domain details for c:\Users* " echo '-------------------------';

(Get-ChildItem -Path "C:\Users*").name |ForEach-Object { Start-Process -FilePath "net" -ArgumentList " user $_ /domain " -NoNewWindow -Wait -RedirectStandardOutput "$Env:temp\users.txt" Get-Content -Path "$Env:temp\users.txt" | Select-String -Pattern "Full Name|Comment" -CaseSensitive }

freeload101 avatar Aug 26 '24 14:08 freeload101