Take Screenshot
Beginner
πͺ Command Prompt (CMD)
powershell Add-Type -AssemblyName System.Windows.Forms; $screen = [System.Windows.Forms.Screen]::PrimaryScreen.Bounds; $bitmap = New-Object System.Drawing.Bitmap($screen.Width, $screen.Height); $graphics = [System.Drawing.Graphics]::FromImage($bitmap); $graphics.CopyFromScreen($screen.Location, [System.Drawing.Point]::Empty, $screen.Size); $bitmap.Save('screenshot.png'); $graphics.Dispose(); $bitmap.Dispose()π» PowerShell
Add-Type -AssemblyName System.Windows.Forms
$screen = [System.Windows.Forms.Screen]::PrimaryScreen.Bounds
$bitmap = New-Object System.Drawing.Bitmap($screen.Width, $screen.Height)
$graphics = [System.Drawing.Graphics]::FromImage($bitmap)
$graphics.CopyFromScreen($screen.Location, [System.Drawing.Point]::Empty, $screen.Size)
$bitmap.Save("screenshot_$(Get-Date -Format 'yyyyMMdd_HHmmss').png")
$graphics.Dispose()
$bitmap.Dispose()
Create Evidence Archive
Beginner
πͺ Command Prompt (CMD)
powershell Compress-Archive -Path "Evidence" -DestinationPath "Evidence_Archive_%date:~-4,4%%date:~-10,2%%date:~-7,2%.zip"
π» PowerShell
Compress-Archive -Path "Evidence" -DestinationPath "Evidence_Archive_$(Get-Date -Format 'yyyyMMdd_HHmmss').zip"
Calculate File Hash (MD5)
Intermediate
πͺ Command Prompt (CMD)
certutil -hashfile filename.txt MD5
π» PowerShell
Get-FileHash -Path filename.txt -Algorithm MD5
Calculate File Hash (SHA256)
Intermediate
πͺ Command Prompt (CMD)
certutil -hashfile filename.txt SHA256
π» PowerShell
Get-FileHash -Path filename.txt -Algorithm SHA256
No commands match