Common PowerShell Commands
# Get system info
Get-ComputerInfo | Select-Object CsName, OsName, OsVersion, CsProcessors, CsTotalPhysicalMemory
# List installed software
Get-Package | Sort-Object Name | Select-Object Name, Version
# Check disk health (SMART)
Get-PhysicalDisk | Select-Object FriendlyName, HealthStatus, OperationalStatus
# Flush DNS
Clear-DnsClientCache
# Test port connectivity
Test-NetConnection -ComputerName 8.8.8.8 -Port 443
# Force Windows Update
Install-Module PSWindowsUpdate -Force
Get-WindowsUpdate -Install -AcceptAll -AutoReboot
Network Diagnostics
# Trace route
tracert 8.8.8.8
# Check open ports (PowerShell)
netstat -ano | findstr LISTENING
# nmap quick scan (from Kali/Linux)
nmap -sV -O --open 192.168.1.0/24
OPNsense Quick Ref
| Task |
Path |
| Firewall rules |
Firewall → Rules |
| Aliases |
Firewall → Aliases |
| DHCP leases |
Services → DHCPv4 → Leases |
| DNS overrides |
Services → Unbound DNS → Overrides |
| Suricata alerts |
Services → Intrusion Detection → Alerts |
| System logs |
System → Log Files |
UniFi Quick Ref
| Task |
Path |
| Client list |
Clients tab |
| AP status |
Devices tab |
| Port forward |
Network → Port Forwarding |
| Traffic rules |
Firewall & Security → Traffic Rules |
| Backup |
Settings → System → Backup |
| SSH to AP |
ssh ubnt@<ap-ip> (default pass: ubnt) |
Windows Event Log IDs
| Event ID |
Meaning |
| 4624 |
Successful logon |
| 4625 |
Failed logon |
| 4648 |
Logon with explicit credentials |
| 4720 |
User account created |
| 4726 |
User account deleted |
| 7045 |
New service installed |
| 1102 |
Audit log cleared ⚠️ |
| Resource |
Details |
| PNWC Main |
360-624-7379 |
| PNWC Email |
jon@pnwcomputers.com |
| ISP NOC (typical) |
On contract/invoice |
| Malwarebytes Support |
support.malwarebytes.com |
| UniFi Community |
community.ui.com |
Security Incident? See Check for Malware/Adware and Security Tune-Up.