CrowdStrike_RTR_Powershell_Scripts
CrowdStrike_RTR_Powershell_Scripts copied to clipboard
RECON_IR add first/title of users
not working ..
echo '-------------------------'; echo "[+] INFO: Atempting to fetch domain details for c:\Users* " echo '-------------------------';
(Get-ChildItem -Path "C:\Users*").name |ForEach-Object { Start-Process -FilePath "net" -ArgumentList " user $_ /domain " -NoNewWindow -Wait -RedirectStandardOutput "$Env:temp\users.txt" Get-Content -Path "$Env:temp\users.txt" | Select-String -Pattern "Full Name|Comment" -CaseSensitive }