Commandes locales Windows/Linux

Commandes rapides, checklists de mission, ports et modèles de preuve pour le travail quotidien.

Windows

whoami /all
Get-ComputerInfo | Select WindowsProductName,WindowsVersion,OsBuildNumber
Get-NetTCPConnection
Get-CimInstance Win32_Service | Select Name,StartName,PathName
Get-ScheduledTask
Get-LocalGroupMember Administrators
Get-MpComputerStatus

Linux

id
uname -a
sudo -l
ss -plant
ps auxfww
systemctl --type=service --state=running
find / -xdev -perm -4000 -type f 2>/dev/null
getcap -r / 2>/dev/null
systemctl list-timers --all

Hash et preuve

sha256sum evidence.bin
stat evidence.bin

Get-FileHash .\evidence.bin -Algorithm SHA256
Get-Item .\evidence.bin | Format-List *