# Basic Powershell Commands
Now that we've understood how cmdlets works - let's explore how to use them! The main thing to remember here is that `Get-Command` and `Get-Help` are your best friends!
***
### Using Get-Help
Get-Help displays information about a cmdlet. To get help about a particular command, run the following:
`Get-Help Command-Name`
You can also understand how exactly to use the command by passing in the `-examples` flag. This would return output like the following:
***
### Using Get-Command
Get-Command gets all the cmdlets installed on the current Computer. The great thing about this cmdlet is that it allows for pattern matching like the following
`Get-Command Verb-*` or `Get-Command *-Noun`
Running `Get-Command New-*` to view all the cmdlets for the verb new displays the following:
***
### Object Manipulation
In the previous task, we saw how the output of every cmdlet is an object. If we want to actually manipulate the output, we need to figure out a few things:
* passing output to other cmdlets
* using specific object cmdlets to extract information
The Pipeline(|) is used to pass output from one cmdlet to another. A major difference compared to other shells is that instead of passing text or string to the command after the pipe, powershell passes an object to the next cmdlet. Like every object in object oriented frameworks, an object will contain methods and properties. You can think of methods as functions that can be applied to output from the cmdlet and you can think of properties as variables in the output from a cmdlet. To view these details, pass the output of a cmdlet to the Get-Member cmdlet `Verb-Noun | Get-Member`
An example of running this to view the members for Get-Command is: `Get-Command | Get-Member -MemberType Method`
From the above flag in the command, you can see that you can also select between methods and properties.
***
### Creating Objects From Previous cmdlets
One way of manipulating objects is pulling out the properties from the output of a cmdlet and creating a new object. This is done using the `Select-Object` cmdlet.
Here's an example of listing the directories and just selecting the mode and the name:
You can also use the following flags to select particular information:
* first - gets the first x object
* last - gets the last x object
* unique - shows the unique objects
* skip - skips x objects
***
### Filtering Objects
When retrieving output objects, you may want to select objects that match a very specific value. You can do this using the `Where-Object` to filter based on the value of properties.
The general format of the using this cmdlet is
```powershell
Verb-Noun | Where-Object -Property PropertyName -operator Value
```
```powershell
Verb-Noun | Where-Object {$_.PropertyName -operator Value}
```
The second version uses the $\_ operator to iterate through every object passed to the Where-Object cmdlet.
**Powershell is quite sensitive so make sure you don't put quotes around the command!**
Where `-operator` is a list of the following operators:
* `-Contains`: if any item in the property value is an exact match for the specified value
* `-EQ`: if the property value is the same as the specified value
* `-GT`: if the property value is greater than the specified value
For a full list of operators, use [this](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/where-object?view=powershell-6) link.
Here's an example of checking the stopped processes:
***
### Sort Object
When a cmdlet outputs a lot of information, you may need to sort it to extract the information more efficiently. You do this by pipe lining the output of a cmdlet to the `Sort-Object` cmdlet.
The format of the command would be
```powershell
Verb-Noun | Sort-Object
```
Here's an example of sort the list of directories:
***
### Find Location of a File
```powershell
Get-ChildItem -Path C:\ -Include *fileName.txt* -File -Recurse -ErrorAction SilentlyContinue
```
***
### Specify Contents of a File
```powershell
Get-Content "C:\Program Files\file.txt"
```
***
### Get the MD5 hash of a File
```powershell
Get-FileHash -Path "C:\Program Files\file.txt" -Algorithm MD5
```
***
### Get Current Working Directory
```powershell
Get-Location
```
***
### Make Web Request to a Server
```powershell
Invoke-WebRequest
```
***
### Base64 decode the file contents
```powershell
certutil -decode "C:\b64.txt" decode.txt
```
***
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/scripting/powershell/basic-powershell-commands.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
