🖥️ Hoja de referencia de PowerShell

Without -Full you get a short summary. Add -Online to open the up-to-date web page instead, or -Examples for just the example section.

Ejemplo

Get-Help Get-ChildItem -Examples

Opciones

Wildcards work on both sides. Use -Noun or -Verb to search by one part of a Verb-Noun name.

Ejemplo

Get-Command -Verb Get -Noun Service

Opciones

Everything in PowerShell is an object, not text, so Get-Member is the main way to discover what you can do with a result before writing the rest of a script.

Ejemplo

Get-Process | Get-Member -MemberType Property

Opciones

Help files are not included by default on a fresh install. Run this once (as Administrator) so Get-Help and -Online have real content.

Controls whether .ps1 scripts are allowed to run at all. Change it with Set-ExecutionPolicy, most safely at the CurrentUser scope.

Ejemplo

Set-ExecutionPolicy -Scope CurrentUser RemoteSigned

Opciones

A profile script runs automatically at the start of every session, a common place for aliases, functions and module imports. PowerShell 7 and Windows PowerShell 5.1 use separate profile files, so settings do not carry over automatically.

Ejemplo

notepad $PROFILE

Works on the file system, but also on other PowerShell drives such as the registry (HKLM:\) or environment variables (Env:\).

Ejemplo

Get-ChildItem -Recurse -Filter *.log | Select-Object -First 10

Opciones

Also works on non-filesystem drives, which is how you “cd” into the registry.

Ejemplo

Set-Location -Path HKLM:\SOFTWARE

Opciones

Moving to a new name in the same folder is how you rename something.

Opciones

Ejemplo

New-Item -Path .\notes.txt -ItemType File

Opciones

The usual guard before reading a file or creating one only if it is missing.

Ejemplo

if (-not (Test-Path .\out)) { New-Item -ItemType Directory .\out }

Ejemplo

Get-Content .\app.log -Tail 20 -Wait

Opciones

Add-Content appends instead of replacing. Out-File is similar but designed to receive pipeline output rather than a -Value string.

Opciones

Ejemplo

Get-Process | Select-Object Name, CPU -First 5

Opciones

$_ refers to the current object. A simplified syntax also works for simple comparisons: Where-Object CPU -gt 10.

Ejemplo

Get-Process | Where-Object { $_.CPU -gt 10 }

Ejemplo

Get-ChildItem | Sort-Object Length -Descending

Opciones

Different from the foreach statement (foreach ($x in $list) {}): ForEach-Object processes one item at a time as it arrives in the pipeline, which uses much less memory for large collections.

Ejemplo

Get-ChildItem *.txt | ForEach-Object { Rename-Item $_ ($_.Name + ".bak") }

Ejemplo

Get-Process | Group-Object Company | Sort-Object Count -Descending

Ejemplo

Get-ChildItem *.log | Measure-Object -Property Length -Sum

Opciones

Only for display: the output becomes text, so do not pipe it into another cmdlet that expects objects. Format-List shows one property per line instead, better for objects with many properties.

Opciones

Ejemplo

Get-Process | Select-Object Name, Id | ConvertTo-Json -Depth 3

Opciones

-NoTypeInformation drops the #TYPE header line. On PowerShell 7 it is the default and the switch is unnecessary, but harmless to include for scripts shared with Windows PowerShell 5.1.

Ejemplo

Get-Process | Export-Csv processes.csv -NoTypeInformation

Ejemplo

Get-Process -Name chrome | Sort-Object CPU -Descending

Opciones

Opciones

Ejemplo

Get-Service -Name wuauserv

Opciones

Start-Service and Stop-Service do the same for just starting or stopping. Requires an elevated session for most system services.

Get-WinEvent replaces the older Get-EventLog, which only reads classic logs and is not available in PowerShell 7 on non-Windows systems (and is deprecated even on Windows).

Ejemplo

Get-WinEvent -FilterHashtable @{ LogName = "Security"; Id = 4625 } -MaxEvents 20

Opciones

Opciones

Windows-only. For driver and feature update history, Windows Update's own history view is more complete than Get-HotFix.

Variable names are not case-sensitive. No declaration keyword is needed; the first assignment creates it.

Ejemplo

$count = 5
$name = "web-server-01"

For a property or expression, wrap it: "Count is $($list.Count)". Single-quoted strings are literal and never interpolate.

Ejemplo

"Server $name has $count cores"

Comparison uses operators like -eq, -ne, -gt, -lt, -like and -match, not ==, !=, >, <, which PowerShell parses differently (as redirection in some contexts).

Ejemplo

if ($count -gt 10) { "many" } elseif ($count -gt 0) { "some" } else { "none" }

For very large or streamed input, ForEach-Object in a pipeline is usually more memory-efficient.

Ejemplo

foreach ($file in Get-ChildItem *.log) { Write-Host $file.Name }

Community convention is an approved Verb-Noun name (see Get-Verb) so your function behaves like a built-in cmdlet and is easy to discover.

Ejemplo

function Get-FileAge {
  param([string]$Path)
  (Get-Date) - (Get-Item $Path).LastWriteTime
}

Only catches terminating errors. Many cmdlets write non-terminating errors instead; add -ErrorAction Stop to force a cmdlet call to throw one that try/catch can catch.

Ejemplo

try {
  Get-Item nonexistent.txt -ErrorAction Stop
} catch {
  Write-Warning $_.Exception.Message
}

Case-insensitive by default for strings. Prefix with c for case-sensitive (-ceq) or i to be explicit about case-insensitive (-ieq).

Opciones

Get-Module -ListAvailable shows every module PowerShell can find, including built-in ones; Get-InstalledModule is scoped to what you installed yourself.

Opciones

Most modules auto-load the first time one of their commands is used, so this is mainly needed for modules that do not support auto-loading, or to load a specific version.

Requires PowerShell Remoting to be enabled on the target (Enable-PSRemoting) and, usually, administrative rights there. On the target machine the script runs under Windows PowerShell 5.1 unless the target also has PowerShell 7 remoting configured.

Ejemplo

Invoke-Command -ComputerName srv01 -ScriptBlock { Get-Service -Name wuauserv }

Opciones

Exit-PSSession or exit returns to the local session. For running the same command on many computers at once, Invoke-Command is usually a better fit than looping Enter-PSSession.

Pass the result to a cmdlet's -Credential parameter. The password is stored as a SecureString in memory, not as plain text, but it is still decrypted when the target cmdlet uses it.

Ejemplo

$cred = Get-Credential
Invoke-Command -ComputerName srv01 -Credential $cred -ScriptBlock { whoami }