Powershell abc

cls        clear screen
notepad  runs notepad
get-process notepad |Format-list * |more         shows the list of process having name of notepad and shows all attached properties, |more is used for paging

get-process |Format-table -property-name name,starttime |more   shows the table of processes, the property which are not shown are because of privileges of currently running powershell user.



get-process | where-object { $_.starttime } |Format-table -property-name name,starttime 
shows the table of processes having value of starttime

gps | ?{$_.starttime} |ft name,starttime

this command is equivalent to above used command

Get-Alias
lists the all the alias

Get-help Get-Alias

-----

Get-Services | where {$_.status eq 'running'}

list of all the services that are running

Get-Services | where {$_.canPauseAndContinue}

---------

Get-Command -Noun Service

get-help set-service

Set-Service -Name lanmanservice -Status paused

------------
stop-process processid

-----
get-process | sort name
-----------------------
Get-EventLog -List

Get-EventLog -LogName 'windows powershell' newest 5 |Formatlist *

Get-EventLog -LogName 'windows powershell' where ($_.message -match 'wmi')
the above commands do the wildcard matching

Get-EventLog -LogName 'windows powershell' -source 'xyz'

Get-EventLog -LogName 'windows powershell' -source 'xyz' -After '3/8/11'