Internet Forensics
parameters
Add-Content cmdlets, 351
Add-History cmdlets, 352
Add-Member cmdlets, 353
Add-PSSnapin cmdlets, 354
Clear-Content cmdlets, 355
Clear-Item cmdlets, 356
Clear-ItemProperty cmdlets, 357
Clear-Variable cmdlets, 358
cmdlets, 11
Compare-Object cmdlets, 359
ConvertFrom-SecureString cmdlets, 360
Convert-Path cmdlets, 361
ConvertTo-Html cmdlets, 362
ConvertTo-SecureString cmdlets, 363
Copy-Item cmdlets, 364
Copy-ItemProperty cmdlets, 365
Export-Alias cmdlets, 366
Export-Clixml cmdlets, 367
Export-Console cmdlets, 368
Export-Csv cmdlets, 369
ForEach-Object cmdlets, 370
Format-Custom cmdlets, 371
Format-List cmdlets, 372
Format-Table cmdlets, 373
Format-Wide cmdlets, 374
Get-Acl cmdlets, 375
Get-Alias cmdlets, 376
Get-AuthenticodeSignature cmdlets, 377
Get-ChildItem cmdlets, 378
Get-Command cmdlets, 379
Get-Content cmdlets, 380
Get-Credential cmdlets, 381
Get-Culture cmdlets, 382
Get-Date cmdlets, 383, 384
Get-EventLog cmdlets, 385
Get-ExecutionPolicy cmdlets, 386
Get-Help cmdlets, 387
Get-History cmdlets, 388
Get-Host cmdlets, 389
Get-Item cmdlets, 390
Get-ItemProperty cmdlets, 391
Get-Location cmdlets, 392
Get-Member cmdlets, 393
Get-PfxCertificate cmdlets, 394
Get-Process cmdlets, 395
Get-PSDrive cmdlets, 396
Get-PSProvider cmdlets, 397
Get-PSSnapin cmdlets, 398
Get-Service cmdlets, 399, 400
Get-TraceSource cmdlets, 401
Get-UICulture cmdlets, 402
Get-Unique cmdlets, 403
Get-Variable cmdlets, 404
Get-WmiObject cmdlets, 405
Group-Object cmdlets, 406
Import-Alias cmdlets, 407
Import-Clixml cmdlets, 408
Import-Csv cmdlets, 409
Invoke-Expression cmdlets, 410
Invoke-History cmdlets, 411
Invoke-Item cmdlets, 412
Join-Path cmdlets, 413
Measure-Command cmdlets, 414
Measure-Object cmdlets, 415, 416
Move-Item cmdlets, 417
Move-ItemProperty cmdlets, 418
New-Alias cmdlets, 419
New-Item cmdlets, 420
New-ItemProperty cmdlets, 421
New-Object cmdlets, 422
New-PSDrive cmdlets, 423
New-Service cmdlets, 424
New-TimeSpan cmdlets, 425
New-Variable cmdlets, 426
Out-Default cmdlets, 427
Out-File cmdlets, 428
Out-Host cmdlets, 429
Out-Null cmdlets, 430
Out-Printer cmdlets, 431
Out-String cmdlets, 432
Pop-Location cmdlets, 433
Push-Location cmdlets, 434
Read-Host cmdlets, 435
Remove-Item cmdlets, 436
Remove-ItemProperty cmdlets, 437
Remove-PSDrive cmdlets, 438
Remove-PSSnapin cmdlets, 439
Remove-Variable cmdlets, 440
Rename-Item cmdlets, 441
Rename-ItemProperty cmdlets, 442
Resolve-Path cmdlets, 443
Restart-Service cmdlets, 444, 445
Resume-Service cmdlets, 446, 447
scripting best practices, 307
Select-Object cmdlets, 448
Select-String cmdlets, 449, 450
Set-Acl cmdlets, 451
Set-Alias cmdlets, 452
Set-AuthenticodeSignature cmdlets, 453, 454
Set-Content cmdlets, 455
Set-Date cmdlets, 456
Set-ExecutionPolicy cmdlets, 457
Set-Item cmdlets, 458
Set-ItemProperty cmdlets, 459, 460
Set-Location cmdlets, 461
Set-PSDebug cmdlets, 462
Set-Service cmdlets, 464
Set-TraceSource cmdlets, 465, 466
Set-Variable cmdlets, 467
Sort-Object cmdlets, 468
Split-Path cmdlets, 469, 470
Start-Service cmdlets, 471, 472
Start-Sleep cmdlets, 473
Start-Transcript cmdlets, 474
Stop-Process cmdlets, 475, 476
Stop-Service cmdlets, 477, 478
Stop-Transcript cmdlets, 479
Suspend-Service cmdlets, 480, 481
Tee-Object cmdlets, 482
Test-Path cmdlets, 483
Trace-Command cmdlets, 484, 485
ubiquitous, 11, 12
Update-FormatData cmdlets, 486
Update-TypeData cmdlets, 487
value types, 350
Where-Object cmdlets, 488
Write-Debug cmdlets, 489
Write-Error cmdlets, 490, 491
Write-Host cmdlets, 492
Write-Output cmdlets, 493
Write-Progress cmdlets, 494
Write-Verbose cmdlets, 495
Write-Warning cmdlets, 496
parent scopes, 25
parsing modes
shells, 23, 24
passwords, 48, 49, 50
Paul, Ryan, 57
periods
scopes, 17
permissions
credentials, 45, 46
Windows management, 267, 268, 269, 270, 271, 273, 274
phases
functions, 220, 221, 222
pipelines
data, 26, 27
Pop-Location cmdlet, 8, 433
PowerShell
profiles, 13
profiles, 14
profiles, 15
profiles, 16
profiles, 17
aliases, 9
cmdlets, 10
parameters, 11
snap-ins, 12, 13
ubiquitous parameters, 11, 12
command-line editing, 8
data pipelines, 26, 27
defined, 3, 4, 5
functions, 26
getting help, 28
multiple shells, 28
navigation, 6, 7, 8
redirection, 18, 19
requirements, 5
scopes, 25, 26
scripting, 5, 6
scripts, 17, 18
special characters, 24
substitution, 18, 19
variables, 19, 20
embedded, 22, 23
names, 20, 21
objects, 21, 22
parsing mode, 23, 24
PowerShell.EXE
running PowerShell, 5
precedence
arithmetic operators, 122, 123
PrimalScript
tooltips, 298, 299
PrimalScript® 4
TFM (italic), 299
principle of least privilege, 46
private keys
code-signing certificate, 41
private variables, 26
ProcessCPU.ps1 listing, 174, 175
processes
Windows management, 278, 279, 280
profiles, 13, 14, 15, 16, 17
properties
.NET Framework, 54
objects, 102
versus methods, 56
-property cmdlet, 187
providers, 7
-pssnapin parameter, 12
public keys
code-signing certificate, 41
Push-Location cmdlet, 8, 434