| A | | |
| ADDUSERS | Add or list users to/from a CSV file |
| ADmodcmd | Active Directory Bulk Modify |
| ARP | Address Resolution Protocol |
| ASSOC | Change file extension associations • |
| ATTRIB | Change file attributes |
| B | | |
| BCDBOOT | Create or repair a system partition |
| BCDEDIT | Manage Boot Configuration Data |
| BITSADMIN | Background Intelligent Transfer Service |
| BROWSTAT | Get domain, browser and PDC info |
| C | | |
| CACLS | Change file permissions |
| CALL | Call one batch program from another • |
| CERTREQ | Request certificate from a certification authority |
| CERTUTIL | Manage certification authority (CA) files and services |
| CD | Change Directory – move to a specific Folder • |
| CHANGE | Change Terminal Server Session properties |
| CHANGEPK | Upgrade device Edition/Product Key |
| CHCP | Change the active console Code Page |
| CHDIR | Change Directory – move to a specific Folder • |
| CHKDSK | Check Disk – check and repair disk problems |
| CHKNTFS | Check the NTFS file system |
| CHOICE | Accept keyboard input to a batch file |
| CIPHER | Encrypt or Decrypt files/folders |
| CleanMgr | Automated cleanup of Temp files, recycle bin |
| CLIP | Copy STDIN to the Windows clipboard |
| CLS | Clear the screen • |
| CMD | Start a new CMD shell |
| CMDKEY | Manage stored usernames/passwords |
| COLOR | Change colors of the CMD window • |
| COMP | Compare the contents of two files or sets of files |
| COMPACT | Compress files or folders on an NTFS partition |
| COMPRESS | Compress one or more files |
| CON | Console input |
| CONVERT | Convert a FAT drive to NTFS |
| COPY | Copy one or more files to another location • |
| Coreinfo | Show the mapping between logical & physical processors |
| CSCcmd | Client-side caching (Offline Files) |
| CSVDE | Import or Export Active Directory data |
| CURL | Transfer data from or to a server |
| D | | |
| DATE | Display or set the date • |
| DEFRAG | Defragment hard drive |
| DEL | Delete one or more files • |
| DELPROF | Delete user profiles |
| DELTREE | Delete a folder and all subfolders |
| DevCon | Device Manager Command Line Utility |
| DIR | Display a list of files and folders • |
| DIRQUOTA | File Server Resource Manager Disk quotas |
| DIRUSE | Display disk usage |
| DISKPART | Disk Administration |
| DISKSHADOW | Volume Shadow Copy Service |
| DISKUSE | Show the space used in folders |
| DISM | Deployment Image Servicing and Management |
| DisplaySwitch | Specify which display to use and how to use it |
| DNSCMD | Manage DNS servers |
| DOSKEY | Edit command line, recall commands, and create macros |
| DriverQuery | Display installed device drivers |
| DSACLs | Active Directory ACLs |
| DSAdd | Add items to Active Directory (user group computer) |
| DSGet | View items in Active Directory (user group computer) |
| DSQuery | Search Active Directory (user group computer) |
| DSMod | Modify items in Active Directory (user group computer) |
| DSMove | Move an Active Directory Object |
| DSRM | Remove items from Active Directory |
| Dsmgmt | Directory Service Management |
| E | | |
| ECHO | Display message on screen • |
| ENDLOCAL | End localisation of the environment in a batch file • |
| ERASE | Delete one or more files • |
| EVENTCREATE | Add a message to the Windows event log |
| EXIT | Quit the current script/routine and set an errorlevel • |
| EXPAND | Uncompress CAB files |
| EXPLORER | Open Windows Explorer |
| EXTRACT | Uncompress CAB files |
| F | | |
| FC | Compare two files |
| FIND | Search for a text string in a file |
| FINDSTR | Search for strings in files |
| FLTMC | Manage MiniFilter drivers |
| FOR /F | Loop command: against a set of files • |
| FOR /F | Loop command: against the results of another command • |
| FOR | Loop command: all options Files, Directory, List • |
| FORFILES | Batch process multiple files |
| FORMAT | Format a disk |
| FREEDISK | Check free disk space |
| FSUTIL | File and Volume utilities |
| FTP | File Transfer Protocol |
| FTYPE | File extension file type associations • |
| G | | |
| GETMAC | Display the Media Access Control (MAC) address |
| GOTO | Direct a batch program to jump to a labelled line • |
| GPRESULT | Display Resultant Set of Policy information |
| GPUPDATE | Update Group Policy settings |
| H | | |
| HELP | Online Help |
| HOSTNAME | Display the host name of the computer |
| I | | |
| iCACLS | Change file and folder permissions |
| IEXPRESS | Create a self extracting ZIP file archive |
| IF | Conditionally perform a command • |
| IFMEMBER | Is the current user a member of a group |
| IPCONFIG | Configure IP |
| INUSE | Replace files that are in use by the OS |
| L | | |
| LABEL | Edit a disk label |
| LGPO | Local Group Policy Object utility |
| LODCTR | Load PerfMon performance counters |
| LOGMAN | Manage Performance Monitor logs |
| LOGOFF | Log a user off |
| LOGTIME | Log the date and time in a file |
| M | | |
| MAKECAB | Create .CAB files |
| MAPISEND | Send email from the command line |
| Manage-BDE | BitLocker Drive Encryption |
| MBSAcli | Baseline Security Analyzer |
| MD | Create a new Directory • |
| MKLINK | Create a symbolic link (linkd) • |
| MODE | Configure a system device COM/LPT/CON |
| MORE | Display output, one screen at a time |
| MOUNTVOL | Manage a volume mount point |
| MOVE | Move files from one folder to another • |
| MOVEUSER | Move a user from one domain to another |
| MSG | Send a message |
| MSIEXEC | Microsoft Windows Installer |
| MSINFO32 | System Information |
| MSTSC | Terminal Server Connection/Remote Desktop Protocol(RDP) |
| N | | |
| NET | Manage network resources |
| NETDOM | Domain Manager |
| NETSH | Configure Network Interfaces, Firewall & Remote access |
| NBTSTAT | Display networking statistics (NetBIOS over TCP/IP) |
| NETSTAT | Display networking statistics (TCP/IP) |
| NLSINFO | Display locale information (reskit) |
| NLTEST | Network Location Test (AD) |
| NMBIND | Manage Hyper-V network bindings |
| NOW | Display the current Date and Time |
| NSLOOKUP | Name server lookup |
| NTBACKUP | Windows Backup folders to tape |
| NTDSUtil | Active Directory Domain Services management |
| NTRIGHTS | Edit user account rights |
| NVSPBIND | Modify network bindings |
| O | | |
| OPENFILES | Query or display open files |
| P | | |
| PATH | Display or set a search path for executable files • |
| PATHPING | Trace route plus network latency and packet loss |
| PAUSE | Suspend processing of a batch file • |
| PERMS | Show permissions for a user |
| PING | Test a network connection |
| PKTMON | Monitor internal packet propagation and packet drop reports |
| POPD | Return to a previous directory saved by PUSHD • |
| PORTQRY | Display the status of ports and services |
| POWERCFG | Configure power settings |
| PRINT | Print a text file |
| PRINTBRM | Print queue Backup/Recovery |
| ProcDump | Monitor an application for CPU spikes |
| PROMPT | Change the command prompt • |
| PsExec | Execute process remotely |
| PsFile | Show files opened remotely |
| PsGetSid | Display the SID of a computer or a user |
| PsInfo | List information about a system |
| PsKill | Kill processes by name or process ID |
| PsList | List detailed information about processes |
| PsLoggedOn | Who’s logged on (locally or via resource sharing) |
| PsLogList | Event log records |
| PsPasswd | Change account password |
| PsPing | Measure network performance |
| PsService | View and control services |
| PsShutdown | Shutdown or reboot a computer |
| PsSuspend | Suspend processes |
| PUSHD | Save and then change the current directory • |
| Q | | |
| QPROCESS | Query Process Display processes |
| QWinsta | Query Session Display all sessions (TS/Remote Desktop) |
| QAppSrv | Query TermServer List all servers (TS/Remote Desktop) |
| QUSER | Query User Display user sessions (TS/Remote Desktop) |
| R | | |
| RASDIAL | Manage RAS connections |
| RASPHONE | Manage RAS connections |
| RD | Delete a Directory • |
| RECOVER | Recover a damaged file from a defective disk |
| REG | Registry: Read, Set, Export, Delete keys and values |
| REGEDIT | Import or export registry settings |
| REGSVR32 | Register or unregister a DLL |
| REGINI | Change Registry Permissions |
| REM | Record comments (remarks) in a batch file • |
| REN | Rename a file or files • |
| REPLACE | Replace or update one file with another |
| Reset Session | Delete a Remote Desktop Session |
| RMDIR | Delete a Directory • |
| RMTSHARE | Share a folder or a printer |
| ROBOCOPY | Robust File and Folder Copy |
| ROUTE | Manipulate network routing tables |
| RUN | Start | RUN commands |
| RUNAS | Execute a program under a different user account |
| RUNDLL32 | Run a DLL command (add/remove print connections) |
| S | | |
| SC | Service Control |
| SCHTASKS | Schedule a command to run at a specific time |
| ScriptRunner | Run one or more scripts |
| SET | Display, set, or remove session environment variables • |
| SETLOCAL | Control the visibility of environment variables • |
| SetSPN | Edit Service Principal Names |
| SETX | Set environment variables |
| SFC | System File Checker |
| SHARE | List or edit a file share or print share |
| ShellRunAs | Run a command under a different user account |
| SHIFT | Shift the position of batch file parameters • |
| SHORTCUT | Create a windows shortcut (.LNK file) |
| SHUTDOWN | Shutdown the computer |
| SIGCHECK | Display file version no. VirusTotal status & timestamp |
| SLEEP | Wait for x seconds |
| SLMGR | Software Licensing Management |
| SORT | Sort input |
| SSH | OpenSSH remote login client |
| START | Start a program, command or batch file • |
| STRINGS | Search for ANSI and UNICODE strings in binary files |
| SUBINACL | Edit file and folder Permissions, Ownership and Domain |
| SUBST | Associate a path with a drive letter |
| SYSMON | Monitor and log system activity to the Windows event log |
| SYSTEMINFO | List system configuration |
| T | | |
| TAKEOWN | Take ownership of a file |
| TAR | Store, list or extract files in an archive |
| TASKLIST | List running applications and services |
| TASKKILL | End a running process |
| TELNET | Communicate with another host using the TELNET protocol |
| TIME | Display or set the system time • |
| TIMEOUT | Delay processing of a batch file/command |
| TITLE | Set the window title for a CMD.EXE session • |
| TLIST | Task list with full path |
| TOUCH | Change file timestamps |
| TRACERT | Trace route to a remote host |
| TREE | Graphical display of folder structure |
| TSDISCON | Disconnect a Remote Desktop Session |
| TSKILL | End a running process |
| TYPE | Display the contents of a text file • |
| TypePerf | Write Performance Monitor data to a log file |
| TZUTIL | Time Zone Utility |
| V | | |
| VER | Display version information • |
| VERIFY | Verify that files have been saved • |
| VMConnect | Connect to a Hyper-V Virtual Machine |
| VOL | Display a disk label • |
| VSSADMIN | Display volume shadow copy backups + writers/providers |
| W | | |
| W32TM | Time Service |
| WAITFOR | Wait for or send a signal |
| WBADMIN | Windows Backup Admin |
| WECUTIL | Windows Event Collector Utility |
| WEVTUTIL | Clear event logs, enable/disable/query logs |
| WHERE | Locate and display files in a directory tree |
| WHOAMI | Output the current UserName and domain |
| WHOIS | Lookup the registration record for a domain |
| WINDIFF | Compare the contents of two files or sets of files |
| WINGET | Windows Package Manager (coming May 2021) |
| WINRM | Windows Remote Management |
| WINRS | Windows Remote Shell |
| WMIC | WMI Commands |
| WPEUTIL | Run WinPE commands |
| WPR | Windows Performance Recorder |
| WT | Windows Terminal |
| WUSA | Windows Update Standalone Installer |
| WUAUCLT | Windows Update |
| X | | |
| XCACLS | Change file and folder permissions |
| XCOPY | Copy files and folders |
| :: | Comment / Remark • |
