PS> Get-Help [[-Name] <String>] [-Full] [-Online] [-Examples] [-Detailed]

# Basic help
PS> Get-Help Get-Process

# Show only examples
PS> Get-Help Get-Process -Examples

# Full parameter reference
PS> Get-Help Get-Process -Full

# Open online docs in browser
PS> Get-Help Get-Process -Online

# Search for commands related to "network"
PS> Get-Help "*network*"

# Browse conceptual topics
PS> Get-Help about_Pipelines
PS> Get-Help about_Functions

# Update help content from Microsoft
PS> Update-Help -Force

# Find cmdlets with "network" in the name
PS> Get-Command "*network*"

# List all cmdlets in a specific module
PS> Get-Command -Module ActiveDirectory

# Find by verb and noun
PS> Get-Command -Verb Get -Noun "*Service*"

# List all aliases
PS> Get-Command -CommandType Alias

# Find where an executable lives
PS> Get-Command notepad.exe

# Count all available cmdlets
PS> (Get-Command -CommandType Cmdlet).Count

# Inspect all members of a process object
PS> Get-Process | Get-Member

# Show only properties
PS> Get-Process | Get-Member -MemberType Property

# Show only methods
PS> Get-Process | Get-Member -MemberType Method

# Inspect a string object
PS> "Hello World" | Get-Member

# Find all note properties (custom properties)
PS> Get-Process | Get-Member -MemberType NoteProperty

# Select specific properties
PS> Get-Process | Select-Object Name, CPU, Id

# Get the top 5 by CPU
PS> Get-Process | Sort-Object CPU -Desc | Select-Object -First 5

# Computed / calculated property
PS> Get-Process | Select-Object Name, @{
    Name = 'MemMB'
    Expression = { [math]::Round($_.WorkingSet64 / 1MB, 1) }
}

# Expand a nested property
PS> Get-Process | Select-Object -ExpandProperty Threads

# Select unique values
PS> Get-Process | Select-Object -Unique -Property Name

# Classic script block syntax
PS> Get-Service | Where-Object { $_.Status -eq 'Running' }

# Simplified comparison syntax (PS 3+)
PS> Get-Service | Where-Object Status -eq 'Running'

# Multiple conditions with -and
PS> Get-Process | Where-Object {
    $_.CPU -gt 10 -and $_.WorkingSet64 -gt 100MB
}

# String pattern matching
PS> Get-Process | Where-Object Name -like "*chrome*"

# Null check
PS> Get-Process | Where-Object { $_.MainWindowTitle -ne '' }

# Basic iteration
PS> 1..5 | ForEach-Object { $_ * 2 }

# Call a method on each object
PS> Get-ChildItem "*.txt" | ForEach-Object { $_.Name.ToUpper() }

# Parallel execution (PS 7+)
PS> 1..20 | ForEach-Object -Parallel {
    Start-Sleep 1; $_
} -ThrottleLimit 5

# Begin / Process / End blocks
PS> 1..3 | ForEach-Object -Begin { "Start" } -Process { $_ } -End { "Done" }

# List all running processes
PS> Get-Process

# Find a specific process
PS> Get-Process -Name chrome

# Top 10 by CPU
PS> Get-Process | Sort-Object CPU -Descending | Select-Object -First 10

# Processes using more than 500MB RAM
PS> Get-Process | Where-Object { $_.WorkingSet64 -gt 500MB }

# Include username (requires admin)
PS> Get-Process -IncludeUserName | Select-Object Name, UserName, CPU

# Remote process list
PS> Get-Process -ComputerName "server01"

# List all services
PS> Get-Service

# Only running services
PS> Get-Service | Where-Object Status -eq 'Running'

# Start all stopped SQL services
PS> Get-Service "sql*" |
    Where-Object {$_.Status -eq 'Stopped'} |
    Start-Service

# Show dependent services
PS> Get-Service lanmanserver -DependentServices

# Export to CSV
PS> Get-Service | Select-Object Name, DisplayName, Status, StartType |
    Export-Csv "services.csv" -NoTypeInformation

# List current directory
PS> Get-ChildItem

# Recursive search for .log files
PS> Get-ChildItem -Path C:\ -Recurse -Filter "*.log"

# Files modified in last 24 hours
PS> Get-ChildItem D:\Logs |
    Where-Object {$_.LastWriteTime -gt (Get-Date).AddDays(-1)}

# Files over 100MB, sorted by size
PS> Get-ChildItem -Recurse |
    Where-Object {$_.Length -gt 100MB} |
    Sort-Object Length -Descending

# Only directories
PS> Get-ChildItem -Directory

# Browse the registry
PS> Get-ChildItem "HKLM:\SOFTWARE\Microsoft"

# Basic ping test
PS> Test-NetConnection "8.8.8.8"

# Test specific TCP port
PS> Test-NetConnection "server01" -Port 443

# Trace route
PS> Test-NetConnection "google.com" -TraceRoute

# Check port 443 across multiple servers
PS> $servers = "web01", "web02", "web03"
PS> $servers | ForEach-Object {
    $r = Test-NetConnection $_ -Port 443
    [PSCustomObject]@{ Server = $_; Port443 = $r.TcpTestSucceeded }
}

# Check current policy
PS> Get-ExecutionPolicy

# Show all scope levels
PS> Get-ExecutionPolicy -List

# Set policy for current user
PS> Set-ExecutionPolicy RemoteSigned -Scope CurrentUser

# One-time bypass for a single script
PS> powershell.exe -ExecutionPolicy Bypass -File .\script.ps1

# Run on a single remote machine
PS> Invoke-Command -ComputerName server01 -ScriptBlock {
    Get-Service wuauserv
}

# Run across multiple servers in parallel
PS> $servers = "web01", "web02", "db01"
PS> Invoke-Command -ComputerName $servers -ScriptBlock {
    [PSCustomObject]@{
        Server = $env:COMPUTERNAME
        FreeGB = [math]::Round((Get-PSDrive C).Free / 1GB, 1)
    }
}

# Pass local variable with $using: scope
PS> $svc = "bits"
PS> Invoke-Command -ComputerName server01 -ScriptBlock {
    Restart-Service $using:svc
}

# As a background job
PS> $job = Invoke-Command -ComputerName server01 -ScriptBlock { Get-Process } -AsJob
PS> Receive-Job $job -Wait

PS> Stop-Process -Name notepad
PS> Stop-Process -Id 1234 -Force
PS> Get-Process chrome | Stop-Process -WhatIf
# Kill all hung processes
PS> Get-Process | Where-Object {$_.Responding -eq $false} | Stop-Process -Force

PS> Start-Process notepad.exe
PS> Start-Process powershell -Verb RunAs # Elevated
PS> Start-Process ".\install.exe" -ArgumentList "/silent" -Wait
PS> Start-Process "https://docs.microsoft.com"

PS> Copy-Item ".\file.txt" "C:\Backup\"
PS> Copy-Item -Path ".\src" -Destination ".\dst" -Recurse
# Copy to remote session
PS> $s = New-PSSession server01
PS> Copy-Item ".\app.zip" -Destination "C:\Deploy\" -ToSession $s

PS> Get-Content ".\readme.txt"
PS> Get-Content ".\app.log" -Tail 100 -Wait  # Live tail
PS> Get-Content ".\data.json" -Raw | ConvertFrom-Json
# Count lines
PS> (Get-Content ".\large.log").Count

PS> Get-Process | Sort-Object CPU -Descending
PS> Get-ChildItem | Sort-Object LastWriteTime
# Multi-property sort
PS> Get-Process | Sort-Object -Property @{E='CPU';Desc=$true}, Name

PS> Get-Process | Format-Table Name, CPU, Id -AutoSize
PS> Get-Service | Format-Table -GroupBy Status -AutoSize

PS> Get-Process | Measure-Object CPU -Sum -Average -Max
PS> Get-ChildItem -Recurse | Measure-Object Length -Sum
# Count lines in a file
PS> Get-Content file.txt | Measure-Object -Line

PS> Get-Process | Select-Object Name, CPU | ConvertTo-Json
PS> @{name="test"; value=42} | ConvertTo-Json -Compress
PS> ConvertTo-Json $data -Depth 5 | Set-Content "output.json"

PS> Set-Content ".\out.txt" "Hello, World"
PS> Add-Content ".\log.txt" ((Get-Date).ToString())
PS> Get-Process | ConvertTo-Csv | Set-Content "processes.csv"

PS> Remove-Item ".\temp.txt"
PS> Remove-Item ".\cache" -Recurse -Force
PS> Remove-Item "C:\Logs\*.log" -WhatIf
# Delete files older than 30 days
PS> Get-ChildItem "C:\Logs" | Where-Object {$_.LastWriteTime -lt (Get-Date).AddDays(-30)} | Remove-Item

PS> Start-Service "wuauserv"
PS> Get-Service "sql*" | Start-Service
PS> Start-Service bits -PassThru

PS> Restart-Service "Spooler"
PS> Restart-Service "wuauserv" -Force
PS> Get-Service "iis*" | Restart-Service -PassThru

PS> Test-Connection "8.8.8.8"
PS> Test-Connection "google.com" -Count 4 -Quiet
# Parallel ping multiple hosts
PS> "web01","web02","db01" | Test-Connection -Count 1

PS> Resolve-DnsName "microsoft.com"
PS> Resolve-DnsName "microsoft.com" -Type MX
PS> Resolve-DnsName "google.com" -Server "1.1.1.1"

PS> Get-NetAdapter
PS> Get-NetAdapter | Where-Object Status -eq Up
PS> Get-NetAdapter -Physical | Select-Object Name, LinkSpeed, MacAddress

PS> Get-NetIPAddress
PS> Get-NetIPAddress -AddressFamily IPv4
PS> Get-NetIPAddress -InterfaceAlias "Ethernet"

PS> Invoke-WebRequest "https://example.com"
# Download a file
PS> Invoke-WebRequest -Uri "https://example.com/file.zip" -OutFile ".\file.zip"
# POST JSON body
PS> $body = @{name="test"} | ConvertTo-Json
PS> Invoke-WebRequest -Uri "https://api.example.com/items" -Method POST -Body $body -ContentType "application/json"

PS> Invoke-RestMethod "https://api.github.com/repos/PowerShell/PowerShell"
# POST with auth header
PS> $headers = @{Authorization = "Bearer $token"}
PS> Invoke-RestMethod -Uri "https://api.example.com/data" -Method POST -Headers $headers -Body ($body | ConvertTo-Json) -ContentType "application/json"

PS> Set-ExecutionPolicy RemoteSigned -Scope CurrentUser
PS> Set-ExecutionPolicy AllSigned -Scope LocalMachine -Force
PS> Set-ExecutionPolicy Bypass -Scope Process

PS> Get-MpComputerStatus
PS> (Get-MpComputerStatus).RealTimeProtectionEnabled
PS> Get-MpComputerStatus | Select-Object AntivirusEnabled, AntispywareSignatureLastUpdated, LastFullScanEndTime

PS> Get-LocalUser
PS> Get-LocalUser | Where-Object Enabled -eq $true
# Disable Guest account
PS> Get-LocalUser "Guest" | Disable-LocalUser

PS> Get-Acl "C:\Sensitive"
PS> (Get-Acl "C:\Data").Access
# Copy ACL from one folder to another
PS> $acl = Get-Acl "C:\Source"
PS> Set-Acl "C:\Dest" $acl

PS> Get-ChildItem Cert:\LocalMachine -Recurse
# Find certs expiring within 30 days
PS> Get-ChildItem Cert:\LocalMachine\My |
    Where-Object {$_.NotAfter -lt (Get-Date).AddDays(30)}
# Find by thumbprint
PS> Get-ChildItem Cert:\LocalMachine -Recurse |
    Where-Object Thumbprint -eq "ABC123..."

PS> $job = Start-Job { Get-Process }
PS> Wait-Job $job
PS> Receive-Job $job
PS> Remove-Job $job
# Multiple parallel jobs
PS> $jobs = 1..5 | ForEach-Object { Start-Job { Start-Sleep 2; $using:_ } }
PS> $jobs | Wait-Job | Receive-Job

try {
    Get-Item "C:\NonExistent" -ErrorAction Stop
} catch [System.IO.FileNotFoundException] {
    Write-Warning "File not found: $($_.Exception.Message)"
} catch {
    Write-Error "Unexpected: $_"
} finally {
    Write-Output "Cleanup complete"
}
# Make ALL errors catchable globally
PS> $ErrorActionPreference = 'Stop'

PS> Import-Module ActiveDirectory
PS> Import-Module ".\MyModule.psm1"
PS> Import-Module Az -Force
PS> Get-Module -ListAvailable
# Install from PSGallery first
PS> Install-Module PSReadLine -Scope CurrentUser

PS> $s = New-PSSession -ComputerName "server01"
PS> Invoke-Command -Session $s -ScriptBlock { Get-Process }
PS> Enter-PSSession $s   # Interactive remote shell
PS> Remove-PSSession $s  # Close when done

PS> Write-Output "Hello, World"
PS> Write-Host "Console only" -ForegroundColor Cyan
# Structured logging streams
PS> Write-Verbose "Debug info"   # Only with -Verbose
PS> Write-Warning "Looks wrong"
PS> Write-Error "Critical failure"

PS> Measure-Command { Get-ChildItem C:\ -Recurse }
# Compare two approaches
PS> Measure-Command { Get-Process | Where-Object Name -eq "chrome" }
PS> Measure-Command { Get-Process -Name "chrome" }  # Faster

PS> Get-EventLog -LogName System -Newest 50
PS> Get-EventLog -LogName Application -EntryType Error -Newest 20
PS> Get-EventLog -LogName Security -After (Get-Date).AddDays(-1)
# Modern equivalent (preferred)
PS> Get-WinEvent -LogName 'System' -MaxEvents 50

PS> Test-Path "C:\Windows"
PS> Test-Path "C:\Logs" -PathType Container
# Guard a script block safely
PS> if (Test-Path ".\config.json") {
    $cfg = Get-Content ".\config.json" -Raw | ConvertFrom-Json
} else { Write-Warning "Config missing" }

PS> Rename-Item ".\old.txt" "new.txt"
# Batch: add date prefix to .log files
PS> Get-ChildItem "*.log" | Rename-Item -NewName {
    "$(Get-Date -Format 'yyyyMMdd')_$($_.Name)"
}
# Change extension for all .txt to .md
PS> Get-ChildItem "*.txt" | Rename-Item -NewName { $_.Name -replace '\.txt$','.md' }

PS> Resolve-Path ".\scripts\*.ps1"
PS> Resolve-Path "~\Documents"
# Get relative path from current location
PS> Resolve-Path "C:\Windows\System32" -Relative