PSReflect-Functions
1.1
Provides Windows API functions as abstracted PowerShell functions.
Installation Options
Owners
Copyright
(c) 2017 Jared Atkinson, Will Schroeder, and Chris Ross. All rights reserved.
Package Details
Author(s)
- Jared Atkinson (@jaredcatkinson) Will Schroeder (@harmj0y) Chris Ross (@xorrior)
Tags
PSReflect Windows-API Win32-API Advapi32 Kernel32 Netapi32 Ntdll Secur32 Wtsapi32
Functions
AdtListCategories AmsiCloseSession AmsiInitialize AmsiOpenSession AmsiResultIsMalware AmsiScanBuffer AmsiScanString AmsiUninitialize ChangeServiceConfig CloseHandle CloseServiceHandle ConvertSidToStringSid CreateFile CreatePipe CreateRemoteThread CreateThread CreateToolhelp32Snapshot CryptCATAdminAcquireContext CryptCATAdminAcquireContext2 CryptCATAdminAddCatalog CryptCATAdminCalcHashFromFileHandle CryptCATAdminCalcHashFromFileHandle2 CryptCATAdminEnumCatalogFromHash CryptCATAdminReleaseCatalogContext CryptCATCatalogInfoFromContext CryptCATStoreFromHandle CryptQueryObject DeleteSecurityPackage DsEnumerateDomainTrusts DsGetSiteName DuplicateToken EnumerateSecurityPackages EnumMonitors FreeContextBuffer GetCurrentProcess GetIpNetTable GetNamedPipeClientComputerName GetNamedPipeClientProcessId GetNamedPipeClientSessionId GetNamedPipeServerProcessId GetNamedPipeServerSessionId GetProcAddress GetThreadContext GetThreadId GetTokenInformation GetVersionFromProcess GlobalAddAtom GlobalDeleteAtom GlobalFindAtom GlobalGetAtomName ImpersonateLoggedOnUser K32GetMappedFileName LoadLibrary LogonUser LookupPrivilegeDisplayName LookupPrivilegeName LsaCallAuthenticationPackage LsaCallAuthenticationPackageKerbPurgeTktCache LsaCallAuthenticationPackageKerbQueryTktCache LsaCallAuthenticationPackageKerbRetrieveTkt LsaConnectUntrusted LsaDeregisterLogonProcess LsaEnumerateLogonSessions LsaFreeReturnBuffer LsaGetLogonSessionData LsaLookupAuthenticationPackage LsaNtStatusToWinError LsaRegisterLogonProcess NetApiBufferFree NetConnectionEnum NetFileEnum NetGetAnyDCName NetGetDCName NetLocalGroupAddMembers NetLocalGroupDelMembers NetLocalGroupEnum NetLocalGroupGetMembers NetSessionEnum NetShareAdd NetShareDel NetShareEnum NetWkstaUserEnum NtClose NtCreateKey NtDeleteKey NtDeleteValueKey NtDuplicateObject NtEnumerateKey NtEnumerateValueKey NtOpenKey NtQueryEaFile NtQueryInformationFile NtQueryInformationThread NtQueryKey NtQueryObject NtQueryValueKey NtSetEaFile NtSetValueKey OpenProcess OpenProcessToken OpenSCManagerW OpenThread OpenThreadToken PeekNamedPipe QueryFullProcessImageName ReadProcessMemory ResumeThread RevertToSelf RtlAdjustPrivilege RtlGetFunctionTableListHead RtlInitUnicodeString SamCloseHandle SamConnect SamOpenDomain SamOpenUser SamSetInformationUser TerminateThread Thread32First VirtualAllocEx VirtualFreeEx VirtualProtectEx VirtualQueryEx WinVerifyTrust WNetAddConnection2W, WNetCancelConnection2 WriteProcessMemory WTSCloseServer WTSEnumerateSessionsEx WTSFreeMemory WTSFreeMemoryEx WTSOpenServerEx WTSQuerySessionInformation WTSQueryUserToken Get-ArpCache Get-Atom Get-DigitalSignature Get-LogonSession Get-SecurityPackage Get-System New-InjectedThread WinVerifyTrust-2
Dependencies
This module has no dependencies.
FileList
- PSReflect-Functions.nuspec
- Contributing.md
- FunctionDefinitions.ps1
- PSReflect-Functions.psd1
- PSReflect-Functions.psm1
- PSReflect.ps1
- advapi32\ChangeServiceConfig.ps1
- advapi32\CloseServiceHandle.ps1
- advapi32\ConvertSidToStringSid.ps1
- advapi32\DuplicateToken.ps1
- advapi32\GetTokenInformation.ps1
- advapi32\ImpersonateLoggedOnUser.ps1
- advapi32\LogonUser.ps1
- advapi32\LookupPrivilegeDisplayName.ps1
- advapi32\LookupPrivilegeName.ps1
- advapi32\LsaNtStatusToWinError.ps1
- advapi32\OpenProcessToken.ps1
- advapi32\OpenSCManagerW.ps1
- advapi32\OpenThreadToken.ps1
- advapi32\RevertToSelf.ps1
- amsi\AmsiCloseSession.ps1
- amsi\AmsiInitialize.ps1
- amsi\AmsiOpenSession.ps1
- amsi\AmsiResultIsMalware.ps1
- amsi\AmsiScanBuffer.ps1
- amsi\AmsiScanString.ps1
- amsi\AmsiUninitialize.ps1
- auditpolcore\AdtListCategories.ps1
- Enumerations\AMSI_RESULT.ps1
- Enumerations\CERT_FIND.ps1
- Enumerations\CERT_FIND_FLAG.ps1
- Enumerations\CERT_NAME.ps1
- Enumerations\CERT_NAME_FLAG.ps1
- Enumerations\CERT_QUERY_CONTENT.ps1
- Enumerations\CERT_QUERY_CONTENT_FLAG.ps1
- Enumerations\CERT_QUERY_FORMAT.ps1
- Enumerations\CERT_QUERY_FORMAT_FLAG.ps1
- Enumerations\CERT_QUERY_OBJECT.ps1
- Enumerations\CMSG_PARAM_TYPE.ps1
- Enumerations\CREATION_DISPOSITION.ps1
- Enumerations\DsDomainFlag.ps1
- Enumerations\DsDomainTrustAttributes.ps1
- Enumerations\DsDomainTrustType.ps1
- Enumerations\DUPLICATE_OPTIONS.ps1
- Enumerations\FILE_ACCESS.ps1
- Enumerations\FILE_ACCESS_MASK.ps1
- Enumerations\FILE_FLAGS_AND_ATTRIBUTES.ps1
- Enumerations\FILE_INFORMATION_CLASS.ps1
- Enumerations\FILE_SHARE.ps1
- Enumerations\KERB_PROTOCOL_MESSAGE_TYPE.ps1
- Enumerations\KEY_ACCESS.ps1
- Enumerations\KEY_INFORMATION_CLASS.ps1
- Enumerations\KEY_VALUE_INFORMATION_CLASS.ps1
- Enumerations\LuidAttributes.ps1
- Enumerations\MemOptions.ps1
- Enumerations\MEMORY_ALLOCATION_TYPE.ps1
- Enumerations\MEMORY_PROTECTION.ps1
- Enumerations\MEMORY_STATE.ps1
- Enumerations\MEMORY_TYPE.ps1
- Enumerations\MIB_IPNET_TYPE.ps1
- Enumerations\MSG_AND_CERT_ENCODING_TYPE.ps1
- Enumerations\OBJECT_INFORMATION_CLASS.ps1
- Enumerations\OBJ_ATTRIBUTE.ps1
- Enumerations\PageOptions.ps1
- Enumerations\PIPE_ACCESS.ps1
- Enumerations\PROCESS_ACCESS.ps1
- Enumerations\PROCESS_CREATION_FLAGS.ps1
- Enumerations\REG_OPTION.ps1
- Enumerations\REG_VALUE_TYPE.ps1
- Enumerations\SECPKG_CALLFLAGS.ps1
- Enumerations\SECPKG_FLAG.ps1
- Enumerations\SecurityEntity.ps1
- Enumerations\SECURITY_IMPERSONATION_LEVEL.ps1
- Enumerations\SECURITY_LOGON_TYPE.ps1
- Enumerations\SE_GROUP.ps1
- Enumerations\SE_PRIVILEGE.ps1
- Enumerations\SID_NAME_USER.ps1
- Enumerations\SIGNATURE_STATE.ps1
- Enumerations\TH32CS.ps1
- Enumerations\THREADINFOCLASS.ps1
- Enumerations\THREAD_ACCESS.ps1
- Enumerations\TOKENMANDATORYPOLICY.ps1
- Enumerations\TOKEN_ACCESS.ps1
- Enumerations\TOKEN_ELEVATION_TYPE.ps1
- Enumerations\TOKEN_INFORMATION_CLASS.ps1
- Enumerations\TOKEN_TYPE.ps1
- Enumerations\Untitled7.ps1
- Enumerations\USER_INFORMATION_CLASS.ps1
- Enumerations\WTD_CHOICE.ps1
- Enumerations\WTD_FLAGS.ps1
- Enumerations\WTD_REVOKE.ps1
- Enumerations\WTD_STATEACTION.ps1
- Enumerations\WTD_UI.ps1
- Enumerations\WTD_UICONTEXT.ps1
- Enumerations\WTS_CONNECTSTATE_CLASS.ps1
- Enumerations\WTS_INFO_CLASS.ps1
- Enumerations\WTS_TYPE_CLASS.ps1
- Examples\Get-ArpCache.ps1
- Examples\Get-Atom.ps1
- Examples\Get-DigitalSignature.ps1
- Examples\Get-ExtendedAttribute.ps1
- Examples\Get-LogonSession.ps1
- Examples\Get-NetRDPSession.ps1
- Examples\Get-SecurityPackage.ps1
- Examples\Get-System.ps1
- Examples\New-InjectedThread.ps1
- Examples\Set-ExtendedAttribute.ps1
- iphlpapi\GetIpNetTable.ps1
- kernel32\CloseHandle.ps1
- kernel32\CreateFile.ps1
- kernel32\CreatePipe.ps1
- kernel32\CreateRemoteThread.ps1
- kernel32\CreateThread.ps1
- kernel32\CreateToolhelp32Snapshot.ps1
- kernel32\GetCurrentProcess.ps1
- kernel32\GetNamedPipeClientComputerName.ps1
- kernel32\GetNamedPipeClientProcessId.ps1
- kernel32\GetNamedPipeClientSessionId.ps1
- kernel32\GetNamedPipeServerProcessId.ps1
- kernel32\GetNamedPipeServerSessionId.ps1
- kernel32\GetProcAddress.ps1
- kernel32\GetThreadContext.ps1
- kernel32\GetThreadId.ps1
- kernel32\GlobalAddAtom.ps1
- kernel32\GlobalDeleteAtom.ps1
- kernel32\GlobalFindAtom.ps1
- kernel32\GlobalGetAtomName.ps1
- kernel32\K32GetMappedFileName.ps1
- kernel32\LoadLibrary.ps1
- kernel32\OpenProcess.ps1
- kernel32\OpenThread.ps1
- kernel32\PeekNamedPipe.ps1
- kernel32\QueryFullProcessImageName.ps1
- kernel32\ReadProcessMemory.ps1
- kernel32\ResumeThread.ps1
- kernel32\TerminateThread.ps1
- kernel32\Thread32First.ps1
- kernel32\VirtualAllocEx.ps1
- kernel32\VirtualFreeEx.ps1
- kernel32\VirtualProtectEx.ps1
- kernel32\VirtualQueryEx.ps1
- kernel32\WriteProcessMemory.ps1
- mpr\WNetAddConnection2W.ps1
- mpr\WNetCancelConnection2.ps1
- netapi32\DsEnumerateDomainTrusts.ps1
- netapi32\DsGetSiteName.ps1
- netapi32\NetApiBufferFree.ps1
- netapi32\NetConnectionEnum.ps1
- netapi32\NetFileEnum.ps1
- netapi32\NetGetAnyDCName.ps1
- netapi32\NetGetDCName.ps1
- netapi32\NetLocalGroupAddMembers.ps1
- netapi32\NetLocalGroupDelMembers.ps1
- netapi32\NetLocalGroupEnum.ps1
- netapi32\NetLocalGroupGetMembers.ps1
- netapi32\NetSessionEnum.ps1
- netapi32\NetShareAdd.ps1
- netapi32\NetShareDel.ps1
- netapi32\NetShareEnum.ps1
- netapi32\NetWkstaUserEnum.ps1
- ntdll\NtClose.ps1
- ntdll\NtCreateKey.ps1
- ntdll\NtDeleteKey.ps1
- ntdll\NtDeleteValueKey.ps1
- ntdll\NtDuplicateObject.ps1
- ntdll\NtEnumerateKey.ps1
- ntdll\NtEnumerateValueKey.ps1
- ntdll\NtOpenKey.ps1
- ntdll\NtQueryEaFile.ps1
- ntdll\NtQueryInformationFile.ps1
- ntdll\NtQueryInformationThread.ps1
- ntdll\NtQueryKey.ps1
- ntdll\NtQueryObject.ps1
- ntdll\NtQueryValueKey.ps1
- ntdll\NtSetEaFile.ps1
- ntdll\NtSetValueKey.ps1
- ntdll\RtlAdjustPrivilege.ps1
- ntdll\RtlGetFunctionTableHead.ps1
- ntdll\RtlInitUnicodeString.ps1
- samlib\SamCloseHandle.ps1
- samlib\SamConnect.ps1
- samlib\SamOpenDomain.ps1
- samlib\SamOpenUser.ps1
- samlib\SamSetInformationUser.ps1
- secur32\DeleteSecurityPackage.ps1
- secur32\EnumerateSecurityPackages.ps1
- secur32\FreeContextBuffer.ps1
- secur32\LsaCallAuthenticationPackage.ps1
- secur32\LsaConnectUntrusted.ps1
- secur32\LsaDeregisterLogonProcess.ps1
- secur32\LsaEnumerateLogonSessions.ps1
- secur32\LsaFreeReturnBuffer.ps1
- secur32\LsaGetLogonSessionData.ps1
- secur32\LsaLookupAuthenticationPackage.ps1
- secur32\LsaRegisterLogonProcess.ps1
- Structures\ACL.ps1
- Structures\ATOM_TABLE_INFORMATION.ps1
- Structures\CATALOG_INFO.ps1
- Structures\CERT_STRONG_SIGN_PARA.ps1
- Structures\CLAIM_SECURITY_ATTRIBUTES_INFORMATION.ps1
- Structures\CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE.ps1
- Structures\CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE.ps1
- Structures\CLAIM_SECURITY_ATTRIBUTE_V1.ps1
- Structures\CONNECTION_INFO_0.ps1
- Structures\CONNECTION_INFO_1.ps1
- Structures\CONTEXT64.ps1
- Structures\CRYPTCATSTORE.ps1
- Structures\CTL_CONTEXT.ps1
- Structures\DS_DOMAIN_TRUSTS.ps1
- Structures\FILETIME.ps1
- Structures\FILE_ALL_INFORMATION.ps1
- Structures\FILE_BASIC_INFORMATION.ps1
- Structures\FILE_FULL_EA_INFORMATION.ps1
- Structures\FILE_INFO_2.ps1
- Structures\FILE_INFO_3.ps1
- Structures\FILE_NAME_INFORMATION.ps1
- Structures\IO_STATUS_BLOCK.ps1
- Structures\KEY_BASIC_INFORMATION.ps1
- Structures\KEY_FULL_INFORMATION.ps1
- Structures\KEY_NAME_INFORMATION.ps1
- Structures\KEY_NODE_INFORMATION.ps1
- Structures\KEY_VALUE_BASIC_INFORMATION.ps1
- Structures\KEY_VALUE_FULL_INFORMATION.ps1
- Structures\KEY_VALUE_PARTIAL_INFORMATION.ps1
- Structures\LARGE_INTEGER.ps1
- Structures\LOCALGROUP_INFO_0.ps1
- Structures\LOCALGROUP_INFO_1.ps1
- Structures\LOCALGROUP_MEMBERS_INFO_0.ps1
- Structures\LOCALGROUP_MEMBERS_INFO_1.ps1
- Structures\LOCALGROUP_MEMBERS_INFO_2.ps1
- Structures\LOCALGROUP_MEMBERS_INFO_3.ps1
- Structures\LSA_LAST_INTER_LOGON_INFO.ps1
- Structures\LSA_STRING.ps1
- Structures\LSA_UNICODE_STRING.ps1
- Structures\LUID.ps1
- Structures\LUID_AND_ATTRIBUTES.ps1
- Structures\MEMORY_BASIC_INFORMATION.ps1
- Structures\MIB_IPNETROW.ps1
- Structures\MODULE_INFO.ps1
- Structures\MONITOR_INFO_2.ps1
- Structures\NETRESOURCEW.ps1
- Structures\OBJECT_ATTRIBUTES.ps1
- Structures\OBJECT_HANDLE_FLAG_INFORMATION.ps1
- Structures\OBJECT_NAME_INFORMATION.ps1
- Structures\OBJECT_TYPES_INFORMATION.ps1
- Structures\PUBLIC_OBJECT_BASIC_INFORMATION.ps1
- Structures\PUBLIC_OBJECT_TYPE_INFORMATION.ps1
- Structures\SAMPR_USER_INTERNAL1_INFORMATION.ps1
- Structures\SecPkgInfo.ps1
- Structures\SECURITY_LOGON_SESSION_DATA.ps1
- Structures\SESSION_INFO_0.ps1
- Structures\SESSION_INFO_1.ps1
- Structures\SESSION_INFO_10.ps1
- Structures\SESSION_INFO_2.ps1
- Structures\SESSION_INFO_502.ps1
- Structures\SHARE_INFO_0.ps1
- Structures\SHARE_INFO_1.ps1
- Structures\SHARE_INFO_2.ps1
- Structures\SHARE_INFO_502.ps1
- Structures\SHARE_INFO_503.ps1
- Structures\SID_AND_ATTRIBUTES.ps1
- Structures\SID_AND_ATTRIBUTES_HASH.ps1
- Structures\SYSTEMTIME.ps1
- Structures\SYSTEM_HANDLE_INFORMATION.ps1
- Structures\THREADENTRY32.ps1
- Structures\TIME_ZONE_INFORMATION.ps1
- Structures\TOKEN_ACCESS_INFORMATION.ps1
- Structures\TOKEN_APPCONTAINER_INFORMATION.ps1
- Structures\TOKEN_DEFAULT_DACL.ps1
- Structures\TOKEN_ELEVATION.ps1
- Structures\TOKEN_GROUPS.ps1
- Structures\TOKEN_GROUPS_AND_PRIVILEGES.ps1
- Structures\TOKEN_LINKED_TOKEN.ps1
- Structures\TOKEN_MANDATORY_LABEL.ps1
- Structures\TOKEN_MANDATORY_POLICY.ps1
- Structures\TOKEN_ORIGIN.ps1
- Structures\TOKEN_OWNER.ps1
- Structures\TOKEN_PRIMARY_GROUP.ps1
- Structures\TOKEN_PRIVILEGES.ps1
- Structures\TOKEN_SOURCE.ps1
- Structures\TOKEN_STATISTICS.ps1
- Structures\TOKEN_USER.ps1
- Structures\UNICODE_STRING.ps1
- Structures\WINTRUST_BLOB_INFO.ps1
- Structures\WINTRUST_CATALOG_INFO.ps1
- Structures\WINTRUST_CERT_INFO.ps1
- Structures\WINTRUST_DATA.ps1
- Structures\WINTRUST_FILE_INFO.ps1
- Structures\WINTRUST_SGNR_INFO.ps1
- Structures\WINTRUST_SIGNATURE_SETTINGS.ps1
- Structures\WKSTA_USER_INFO_0.ps1
- Structures\WKSTA_USER_INFO_1.ps1
- Structures\WTS_CLIENT_ADDRESS.ps1
- Structures\WTS_SESSION_INFO_1.ps1
- winspool\EnumMonitors.ps1
- wintrust\CryptCATAdminAcquireContext.ps1
- wintrust\CryptCATAdminAcquireContext2.ps1
- wintrust\CryptCATAdminAddCatalog.ps1
- wintrust\CryptCATAdminCalcHashFromFileHandle.ps1
- wintrust\CryptCATAdminCalcHashFromFileHandle2.ps1
- wintrust\CryptCATAdminEnumCatalogFromHash.ps1
- wintrust\CryptCATAdminReleaseCatalogContext.ps1
- wintrust\CryptCATAdminReleaseContext.ps1
- wintrust\CryptCATCatalogInfoFromContext.ps1
- wintrust\CryptCATStoreFromHandle.ps1
- wintrust\WinVerifyTrust.ps1
- wtsapi32\WTSCloseServer.ps1
- wtsapi32\WTSEnumerateSessionsEx.ps1
- wtsapi32\WTSFreeMemory.ps1
- wtsapi32\WTSFreeMemoryEx.ps1
- wtsapi32\WTSOpenServerEx.ps1
- wtsapi32\WTSQuerySessionInformation.ps1
- wtsapi32\WTSQueryUserToken.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 2.0.0 | 21,849 | 6/10/2021 |
| 1.1 (current version) | 3,042 | 5/11/2018 |
| 1.0 | 376 | 6/18/2017 |