CmdID / PowerShell / Cmdlets / Get
Get-TypeData
Gets the extended type data in the current session. PowerShell reference
From the PowerShell reference 1 parameter
What it does
Gets the extended type data in the current session. The Get-TypeData cmdlet gets the extended type data in the current session. This includes type data that was added to the session by Types.ps1xml file and dynamic type data that was added by using the parameter of the Update-TypeData cmdlet. You can use the extended type data that Get-TypeData returns to examine the type data in the session and send it to the Update-TypeData and Remove-TypeData cmdlets. Extended type data adds properties and methods to objects in PowerShell. You can use the added properties and methods in the same ways that you would use the properties and methods that are defined in the object type. However, when writing scripts, be aware that the added properties and methods might not be present in every PowerShell session. For more information about Types.ps1xml files, see about_Types.ps1xml. For more information about dynamic type data that the Update-TypeData cmdlet adds, see Update-TypeData. This cmdlet was introduced in Windows PowerShell 3.0.
Get-TypeData [[-TypeName] <String[]>] [<CommonParameters>]
Get all extended type data
Get-TypeDataIdentifyGet type data by name
Get-TypeData -TypeName System.IO.*IdentifyGet the scriptblock that creates a property value
(Get-TypeData EventLogEntry).Members.EventIDIdentifyGet the scriptblock that defines a property for a specified object
(Get-TypeData -TypeName System.DateTime).Members["DateTime"].GetScriptBlock
if ((& { Set-StrictMode -Version 1; $this.DisplayHint }) -ieq "Date") {
"{0}" -f $this.ToLongDateString()
}
elseif ((& { Set-StrictMode -Version 1; $this.DisplayHint }) -ieq "Time") {
"{0}" -f $this.ToLongTimeString()
}
else {
"{0} {1}" -f $this.ToLongDateString(), $this.ToLongTimeString()
}IdentifyTrips 1 Sigma rule: highPowershell Token Obfuscation - Process Creation by frack113
Its page in the reference: Get-TypeData.
Parameters
-TypeNameSpecifies type data as an array only for the types with the specified names. By default,
Get-TypeData gets all types in the session.
Enter type names or a name patterns. Full names, or name patterns with wildcard characters are required, even for types in the System namespace. Wildcards are supported and the parameter name TypeName is optional. You can also pipe type names to Get-TypeData.