PowerShell
Windows administration, recon and automation cmdlets. · 12 commands
Get-Process
passiveList running processes on Windows.
Get-Service
passiveEnumerate Windows services and their state.
Get-NetTCPConnection
passiveList active TCP connections (PowerShell netstat).
Test-NetConnection
lowPing/port/traceroute diagnostics in one cmdlet.
Invoke-WebRequest
lowPowerShell’s curl/wget for HTTP.
Resolve-DnsName
passiveDNS lookups from PowerShell.
Get-LocalUser
passiveEnumerate local user accounts.
Get-FileHash
passiveCompute file hashes (SHA256, etc.).
Get-EventLog / Get-WinEvent
passiveQuery Windows event logs.
Get-ChildItem
passiveList files/dirs/registry (PowerShell ls/dir).
Get-Acl
passiveInspect permissions (ACLs) on objects.
Set-ExecutionPolicy
lowControl whether PowerShell scripts may run.