Index

Note: Page numbers followed by f indicate figures, and t indicate tables.

A

Active connections 
built-in ARP utility 140
built-in IPCONFIG command 139
built-in NETSTAT utility 136
built-in ROUTE utility 141
third-party utility CurrPorts 138
third-party utility TCPVCON 137
Active process, services, and scheduled tasks details 142–147
Advanced automotive technology 171–172
/A:HS-D option 64
Alternate data streams (ADS) 88–91
Android 174, 175f
Apple Watch 174, 175f
Authentication 12

B

Buffer Size 35
Built-in QUSER utility 135
Built-in WHOAMI command 135

C

cat/proc/meminfo command 173
CCCleaner Web page 110
CD command 39
Command line applications 174–176
Command Line interface (CLI) commands 121–122
Command Prompt  See Windows Command Line ...

Get Executing Windows Command Line Investigations now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.