CmdID / Browse
Browse
Every page CmdID has, 71,440 in all, by what it is about. To see what one command line does, paste it into CmdID.
Linux, macOS and Windows commands: what each one does, its options and everyday examples, from tldr-pages, Microsoft’s Windows commands reference and toybox, and the Sigma rules that name it.
PowerShell’s own cmdlets and those of the Windows Server, Exchange, Teams and Microsoft Graph modules: synopsis, syntax, parameters and their aliases, and the Sigma rules that look for them. By verb:
Get6,624 cmdletsRemove2,462 cmdletsNew1,858 cmdletsUpdate1,582 cmdletsSet1,279 cmdletsInvoke468 cmdletsAdd326 cmdletsEnable190 cmdletsDisable180 cmdletsTest126 cmdletsStop99 cmdletsCopy92 cmdletsStart92 cmdletsExport89 cmdletsGrant89 cmdletsClear83 cmdletsRestore75 cmdletsImport61 cmdletsReset44 cmdletsConfirm40 cmdletsRename36 cmdletsResume35 cmdletsInstall32 cmdletsSuspend31 cmdletsCloud and container CLIs
Every aws service and operation, az group and command, and docker and kubectl command, with its reference’s first sentence, its options and a link to its page in the reference.
The 245 Windows programs LOLBAS and the 477 Unix programs GTFOBins document abuse of: each documented command read by CmdID, the Sigma rules that name the program and the ATT&CK techniques its abuse serves.
Windows libraries, programs and drivers: what each one is, where it is installed, who signs it, the hashes of its known copies and the Sigma rules that name it.
The Sigma process creation rules CmdID evaluates, each with its detection as SigmaHQ writes it, its authors, and the commands on this site that trip it.
The MITRE ATT&CK techniques the rules and programs name, each with the programs and commands that reach it.
Where it all comes from, and each source’s licence: Sources and licences. What CmdID keeps and sends: Privacy and security.