Internet Forensics
- Table of Contents
- Back Cover
- Windows PowerShell-TFM
- Foreword
- Part I: Introduction
- Chapter 1: Getting Started
- PowerShell Requirements
- Quick Start
- Navigating Your System
- Using the PowerShell Command Line
- Aliases
- Basic Cmdlets
- Snap-Ins
- Profiles
- Scripts
- Redirection and Substitution
- Variables
- Special Characters
- Scopes
- Functions
- Pipelines
- Getting Help
- Multiple Shells
- Where Do You Go From Here?
- How to Use This Book
- Chapter 2: Your First Powershell Script
- Script Editing
- The Script
- Chapter 3: Security Features
- Why Won t My Scripts Run?
- Alternate Credentials
- Is PowerShell Dangerous?
- Passwords and Secure Strings
- Chapter 4: Technologies Overview
- Microsoft .NET Framework Essentials
- Variables as Objects
- Understanding Scope
- Windows Management Instrumentation Essentials
- Part II: PowerShell Scripting
- Chapter 5: Variables, Arrays, Objects and Escape Sequences
- Variables
- Arrays
- Associative Arrays
- Objects
- Variables as Objects
- Creating New Objects
- Escape Characters
- Chapter 6: Operators
- Logical Operators
- Assignment Operators
- Bitwise Operators
- Special Operators
- Comparison Operators
- Chapter 7: Regular Expressions
- Writing Regular Expressions
- Regex Object
- Regular Expression Examples
- Regular Expression Reference
- Chapter 8: Loops and Decision Making Constructs
- ForEach
- For
- While
- If
- Switch
- Break
- Continue
- Chapter 9: Grouping, Sorting, Formatting, Exporting and More
- Redirection
- Write-Host
- Formatting
- Sort-Object
- Where-Object
- Exporting
- System Forms
- Chapter 10: Modularization
- Script Blocks
- Functions
- Filters
- Cmdlets and Snapins
- Modularization Tricks
- Chapter 11: Debugging and Error Handling
- Handling Errors
- Debugging Methodology
- Debug Mode and Tracing
- Chapter 12: Managing Windows with Powershell
- Managing Files and Directories
- Managing Systems with PowerShell and WMI
- Managing Services
- Managing Permissions
- Managing Event Logs
- Managing Processes
- Managing the Registry
- Managing Directory Services
- Part III: Advanced PowerShell
- Chapter 13: Shortcuts and Tips
- Command-Line Tips
- PrimalScript Tips
- Aliases and Shortcuts
- Memory Math
- Web-ify PowerShell
- Best Practices for PowerShell Scripting
- Chapter 14: Database Scripting
- Database Terminology
- Working with Databases
- Database Example
- Chapter 15: Extending Types
- The Types File
- Aliasing
- Adding Features
- Why is This Useful?
- Chapter 16: Powershell Jump-Start for VBScripters
- Variables
- COM Objects
- Comments
- Loops and Constructs
- Type Conversion
- Operators and Special Values
- Functions and Subs
- Error Handling
- Windows Management Instrumentation
- Active Directory Services Interface
- Common Tasks in VBScript
- PowerShell Paradigm Change
- Appendix A: Cmdlet Reference
- Add-Content
- Add-History
- Add-Member
- Add-PSSnapin
- Clear-Content
- Clear-Item
- Clear-ItemProperty
- Clear-Variable
- Compare-Object
- ConvertFrom-SecureString
- Convert-Path
- ConvertTo-Html
- ConvertTo-SecureString
- Copy-Item
- Copy-ItemProperty
- Export-Alias
- Export-Clixml
- Export-Console
- Export-Csv
- ForEach-Object
- Format-Custom
- Format-List
- Format-Table
- Format-Wide
- Get-Acl
- Get-Alias
- Get-AuthenticodeSignature
- Get-ChildItem
- Get-Command
- Get-Content
- Get-Credential
- Get-Culture
- Get-Date
- Get-EventLog
- Get-ExecutionPolicy
- Get-Help
- Get-History
- Get-Host
- Get-Item
- Get-ItemProperty
- Get-Location
- Get-Member
- Get-PfxCertificate
- Get-Process
- Get-PSDrive
- Get-PSProvider
- Get-PSSnapin
- Get-Service
- Get-TraceSource
- Get-UICulture
- Get-Unique
- Get-Variable
- Get-WmiObject
- Group-Object
- Import-Alias
- Import-Clixml
- Import-Csv
- Invoke-Expression
- Invoke-History
- Invoke-Item
- Join-Path
- Measure-Command
- Measure-Object
- Move-Item
- Move-ItemProperty
- New-Alias
- New-Item
- New-ItemProperty
- New-Object
- New-PSDrive
- New-Service
- New-TimeSpan
- New-Variable
- Out-Default
- Out-File
- Out-Host
- Out-Null
- Out-Printer
- Out-String
- Pop-Location
- Push-Location
- Read-Host
- Remove-Item
- Remove-ItemProperty
- Remove-PSDrive
- Remove-PSSnapin
- Remove-Variable
- Rename-Item
- Rename-ItemProperty
- Resolve-Path
- Restart-Service
- Resume-Service
- Select-Object
- Select-String
- Set-Acl
- Set-Alias
- Set-AuthenticodeSignature
- Set-Content
- Set-Date
- Set-ExecutionPolicy
- Set-Item
- Set-ItemProperty
- Set-Location
- Set-PSDebug
- Set-Service
- Set-TraceSource
- Set-Variable
- Sort-Object
- Split-Path
- Start-Service
- Start-Sleep
- Start-Transcript
- Stop-Process
- Stop-Service
- Stop-Transcript
- Suspend-Service
- Tee-Object
- Test-Path
- Trace-Command
- Update-FormatData
- Update-TypeData
- Where-Object
- Write-Debug
- Write-Error
- Write-Host
- Write-Output
- Write-Progress
- Write-Verbose
- Write-Warning
- Appendix B: Type Reference
- Boolean
- DateTime
- Double
- Int
- String
- Advanced Types
- All Types
- Index
- A
- B
- C
- D
- E
- F
- G
- H
- I
- J
- L
- M
- N
- O
- P
- Q
- R
- S
- T
- U
- V
- W
- X
- List of Figures
- List of Tables
- List of Examples