| Module Name | Module Guid | Download Help Link | Help Version | Locale |
|---|---|---|---|---|
PowerGRR |
5bdf023f-fe8a-4748-bd73-43a449791ba8 |
1.0.0.0 |
en-US |
PowerGRR is a PowerShell module for working with the GRR API. It allows working with flows, hunts, labels and the GRR search. Furthermore, it allows working with the computer names instead of the GRR internal client id. This makes the handling and working with other tools more easy because often you just have the computer names.
Upload artifact to GRR.
Decode a base64 encoded string.
Convert a unix timestamp into UTC.
Get the list of available artifacts.
Use the GRR search function to search for clients. The function returns only the computername or the whole GRR object.
Search for clients with a given label.
Get client approvals identified by the given filters.
Convert a computername into the corresponding GRR client id.
Get various information about a specific host.
Search for a specific client id and return the computername.
Get the current PowerGRR config.
List flows for specific client.
Get a list of all available flows.
Read informationen and state for specific flow.
Export files archive from a flow.
Get flow results for a specific client and a flow.
Get a list of available hunts. Filter the list with the parameter or afterwards with PowerShell.
Get hunt approvals identified by the given filters.
Export files archive from a hunt.
Get hunt info for a specific hunt.
Get hunt results for a specific hunt.
Get all labels.
Return the headers and the websession for a specific GRR server.
Invoke a flow on one or multiple clients.
Helper function for GRR requests. If a function you need is not available you can use this function to run the needed request.
Create a new client approval.
Create a new hunt.
Create a new hunt approval.
Remove artifact in GRR.
Remove a label on a range of clients.
Set a label on one or multiple clients. The function has pipeline support.
Start a GRR hunt based on the hunt id.
Stop a GRR hunt based on the hunt id.
Wait for client approval.
Wait for hunt approval.