Windows Commands

Powershell Commands

• Get-Process: Lists all running processes.
  Example

  Get-Process | Where-Object { $_.CPU -gt 100 }: Lists processes using more than 100 CPU units.

• Get-CimInstance -ClassName: Queries system information.
  Example

  Get-CimInstance -ClassName Win32_Product | Where-Object { $_.Name -like "*SoftwareName*" }: Lists software installed that matches the name provided.

• Get-Service: Displays all installed services.
• Set-ExecutionPolicy: Changes the script execution policy.
• Test-Connection: Pings a remote host.
• Get-Help: Provides help for a specific command.
• Get-EventLog -LogName Security: Views security logs.
• Set-Service -Name [service] -StartupType Disabled: Configures a service startup type.
• Restart-Service [service]: Restarts a specified service.
• Get-FileHash [file]: Calculates a file hash.
• Test-NetConnection: Tests network connectivity.
• Enable-PSRemoting: Enables remote PowerShell sessions.
• Export-Csv [outputfile.csv]: Exports data to a CSV file.

Batch Commands

• dir: Lists the contents of a directory.
• echo: Displays messages or turns command echoing on/off.
• ipconfig: Displays IP configuration details.
• tasklist: Lists all running tasks.
• shutdown /s: Shuts down the computer.
• netstat -ano: Displays active network connections and listening ports.
• taskkill /PID [pid] /F: Terminates a process by PID forcefully.
• whoami /all: Displays detailed information about the logged-in user.
• systeminfo: Displays detailed information about the machine's hardware and operating system.
• chkdsk: Checks the file system and disk for errors.
• sfc /scannow: Runs the System File Checker to repair corrupted files.
• dism /online /cleanup-image /restorehealth: Repairs a Windows image.
• ipconfig /flushdns: Flushes the DNS resolver cache.
• ping [hostname/IP]: Tests connectivity to a host.
• tracert [hostname/IP]: Traces the route to a host.
• net use: Maps network drives or lists network shares.
• netsh advfirewall: Manages Windows Firewall settings.
• gpupdate /force: Forces a Group Policy update.
• gpresult /h [filename].html: Shows what group policies are applied.

Run Dialog Commands

• cmd: Opens Command Prompt.
• powershell: Opens PowerShell.
• notepad: Opens Notepad.
• msconfig: Opens System Configuration.
• taskmgr: Opens Task Manager.
• eventvwr: Opens Event Viewer.
• wuapp: Opens Windows Updates.
• control: Opens the Control Panel.
• control printers: Opens Devices & Printers.
• perfmon: Opens Performance Monitor.
• msinfo32: Opens System Information.
• cleanmgr: Opens Disk Cleanup utility.
• regedit: Opens the Registry Editor.
• sndvol: Opens the Volume Mixer.
• appwiz.cpl: Opens the Programs and Features.
• ncpa.cpl: Opens the Network Connections (adapter settings).
• powercfg.cpl: Opens the Power Options.
• sysdm.cpl: Opens the System Properties.
• diskmgmt.msc: Opens Disk Management.
• devmgmt.msc: Opens Device Manager.
• gpmc.msc: Opens the Group Policy Management Console.
• gpedit.msc: Opens the Group Policy Editor.
• services.msc: Opens the Services Manager.
• lusrmgr.msc: Opens Local Users and Groups.
• rsop.msc: Opens Resultant Set of Policy.
• dsa.msc: Opens Active Directory.