Commands Flashcards
Skibidi
What command displays information about the computer and its OS?
systeminfo
What command retrieves system information from a remote machine?
systeminfo /s (computername)
What command allows you to view the version via CLI?
ver
What command allows you to view the visible network adapters?
get-netadapter
What command displays IPv4, IPv6, subnet masks, and default gateway for all adapters?
ipconfig
What command displays all users on your workstation?
net user
What command creates a new user?
net user (name) (password) /add
What command displays lists of groups on your workstation?
net localgroup
What command creates a new group?
net localgroup groupname /add
What command gets all commands?
get-command
What command gets all available cmdlets with a specific name?
get-help (cmd name)
What command displays name, status, and description for local users?
get-localuser
What command displays all local security groups?
get-localgroup
What command displays users from a local group?
get-localgroupmember (-group)
What command adds users to a local group?
get-localgroupmember (-groupname) (-member) (username)
What command displays your Security Identifier (SID)?
whoami /user
What command displays the SID for every user on the domain?
wmic useraccount get name,side
What command finds a specified user’s SID?
get-localuser | where-object {$_.Name -eq “talayeh.matthews009”} |select-object name
What command displays your SID?
get-wmiobject win32_useraccount
What command displays everyone’s SIDs?
get-wmiobject win32_useraccount | select Name,*SID
What command displays current settings for password and logon limitations?
net accounts
What command sets the account minimum password length to eight characters?
net account /minpwlen:8
What command opens the local security policy GUI?
secpol
What command sets the maximum number of days a password is valid?
net accounts /maxpwage:30
What command opens the registry editor?
regedit
What command displays an object’s value in the registry?
reg query
What command adds an object or value to the registry?
reg add
What command removes an object from the registry?
reg delete
What command displays the keys inside HKLM:\?
get-childterm -path hklm:\
What command displays all services that are running, stopped, or paused?
get-service (-computername)
What command starts a service?
start-service (servicename)
What command stops a service?
stop-service (servicename)
What command is used to start, stop, suspend, or change properties of a service?
set-service -name (servicename) -startuptype (automatic/manual)
What command shows a list of running services with their Process ID (PID)?
tasklist /svc
What command is used to view services running on a remote machine?
tasklist /svc /s (computername/ip)
What command filters the tasklist output for specific names, values, or operators?
tasklist /fi (example: tasklist /fi “PID eq 7360”)
What command is used to start or list running network services?
net start
What command is used to stop running network services?
net stop
What command shows all running processes?
sc query
What command queries the configuration information for services?
sc qc
What command starts a service?
sc start
What command stops a service?
sc stop
What command starts a service on a remote machine?
sc \\servername start
What command shows all running processes?
sc.exe query
What command queries the configuration information for services?
sc.exe qc
What command starts a service?
sc.exe start
What command stops a service?
sc.exe stop
What command starts a service on a remote machine?
sc.exe \\servername start
What command displays what file system is formatted on your drive?
fsutil fsinfo volumeinfo C:
What command shows the Master File Table (MFT) information for a file?
fsutil file layout (/v filename)
What command allows you to query logs and specify what you want to look for?
get-winevent -logname security -maxevent 5 |ft wrap
What command enables auditing?
Auditpol