CmdID

CmdID / Commands

echo

Displays messages or turns on or off the command echoing feature. Windows commands reference

On Windows, Linux 2 Sigma rules name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from the Windows commands reference, CC BY 4.0

Displays messages or turns on or off the command echoing feature. If used without parameters, echo displays the current echo setting.

echo [<message>]
echo [on | off]
echo
echo.
echo off
@echo off
if exist *.rpt echo The report has arrived.
@echo off
if not exist *.txt (
echo This directory contains no text files.
) else (
echo This directory contains the following text file^(s^):
[on | off]Turns on or off the command echoing feature. Command echoing is on by default.
<message>Specifies the text to display on the screen.
/?Displays help at the command prompt.

Linux

from the toybox, 0BSD

Write each argument to stdout, one space between each, followed by a newline. \\ Backslash \0NNN Octal (1-3 digit) \xHH Hex (1-2 digit) \a Alert (beep/flash) \b Backspace \c Stop here (no \n) \f Form feed \n Newline \r Carriage return \t Horizontal tab \v Vertical tab

echo [-Een] [ARG...]
-EPrint escape sequences literally (default)
-eProcess the following escape sequences:
-nNo trailing newline

Several platforms

from tldr-pages, CC BY 4.0

Print given arguments.

Print a text message. Note: Quotes are optional

echo "Hello World"Identify

Print a message with environment variables

echo "My path is $PATH"Identify

Print a message without the trailing newline

echo -n "Hello World"Identify
-nNo trailing newline toybox

Append a message to the file

echo "Hello World" >>file.txtIdentify

Enable interpretation of backslash escapes (special characters)

echo -e "Column 1\tColumn 2"Identify
-eProcess the following escape sequences: toybox

Print the exit status of the last executed command (Note: In Windows Command Prompt and PowerShell the equivalent commands are echo %errorlevel% and $lastexitcode respectively)

echo $?Identify

Pass text to another program through stdin

echo "Hello World" | programIdentify

What detects it

Sigma process creation rules that name echo