..
/ Get-NetEventSession
Gets network event sessions
Functions:
Network
Type:
Cmdlets
Toolsets:
Builtin
CIMSession
Network
Get status of an event session
Get-NetEventSession -Name sess -CimSession $s
Usecase
Sniff authentication traffic on a domain controller and locally crack the hashes
Comments
Create CimSession
$s
using
New-CimSession
See all details in
New-NetEventSession
PowerShell Module:
NetEventPacketCapture
Mitre Att&ck
T1047
Updated: 2023-07-01
Contributor: Arris Huijgen (
bitsadmin
)
