# PowerShell

Use this page for PowerShell quick references and security analyst command examples. Long-form PowerShell learning resources live in Learn to Code.

{% content-ref url="../learn-to-code.md" %}
[learn-to-code.md](../learn-to-code.md)
{% endcontent-ref %}

## Cheatsheets

{% embed url="https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/bltf146e4f361db3938/5e34a7bc946d717e2eab6139/power-shell-cheat-sheet-v41.pdf" %}

{% embed url="https://wiki.sans.blue/Tools/pdfs/PowerShell.pdf" %}

* [SANS Get-WinEvent Cheatsheet](https://wiki.sans.blue/Tools/pdfs/Get-WinEvent.pdf)
* [SOC Analyst Scrolls: PowerShell](https://docs.quasarops.com/en/public/the-soc-analyst-scrolls/powershell)
* [SOC Analyst Scrolls: One-Liners](https://docs.quasarops.com/en/public/the-soc-analyst-scrolls/one-liners)

## Pages in This Section

{% content-ref url="common-commands.md" %}
[common-commands.md](common-commands.md)
{% endcontent-ref %}

## Legacy / Archived Resources

These resources may still explain useful concepts, but they reference older PowerShell versions.

* [Layman's Guide to PowerShell 2.0 Remoting](https://ravichaganti.com/ebooks/AlaymansguidetoPowerShell2remotingv2.pdf)
* [Mastering PowerShell v2](http://community.idera.com/powershell/powertips/b/ebookv2#pi619PostSortOrder=Ascending)
* [PowerShell 2.0 - One CMDLET At A Time](http://www.jonathanmedd.net/wp-content/uploads/2010/09/PowerShell_2_One_Cmdlet_at_a_Time.pdf)