3 Commits

Author SHA1 Message Date
LuemmelSec 16abad8a93 Update OfficeMemScraper.ps1
Added the "-append" flag for the out-file function.
When there is more than one process, the tool will iterate over each of them, create a dump and then out-file the results, overwriting them on each iteration.

In my case I dumped msedge.exe, which had 10 processes running.
The Token for office.com was only contained in one of the dumps.

With this addition, we can preserve all findings in one file :)
2022-10-05 14:48:47 +02:00
Steve Borosh 33b995469d Update OfficeMemScraper.ps1 2022-09-19 07:41:00 -04:00
Steve Borosh 52ac9e6a58 Create OfficeMemScraper.ps1 2022-09-19 07:39:43 -04:00