WMIC cheat sheet

wmic.md

WMIC

computer name:

wmic computersystem get "Name"

processes:

wmic process

processor name:

wmic CPU get Name

math:

normal and [math]::fnname(args)

variable declaration:

$varname = value

list directory

get-childitem

list by date

get-childitem | sort-object date

find command containing substring:

proper way: gcm -name "substring" shady way: use wildcard (*) and autocomplete (tab)

save all file data and metadata to csv:

gci | export-csv filename.csv

registry from powershell

get-psdrive -psprovider registry

command on remote computer

Invoke-Command -ComputerName COMPUTER -ScriptBlock { COMMAND } -credential USERNAME enter-pssession computername

add user

new-aduser -name [name] -surname [surname] -samaccountname [login] -AccountPassword * new-psdrive add-adgroupmember