Related notes

PowerShell Function Basics and Recursion
#powershell #programming-basics #recursion
Writing Python Functions and Recursion Basics
#python #programming-basics #recursion #digital-forensics
Synthesis: Core Forensic Principles in Practice
#forensics #digital-forensics #principles #synthesis
Regex Fundamentals
#regex #digital-forensics #log-analysis #burp-suite
PowerShell as an Acquisition Engine
#powershell #acquisition #digital-forensics #incident-response
Experimenting with PowerShell
#powershell #powershell-ise #windows #cmdlet
PowerShell ISE Panels
#powershell #powershell-ise #digital-forensics #cmdlet
Footprint (Forensic)
#forensics #digital-forensics #network-forensics #live-systems
Direct Evidence
#forensics #digital-forensics #network-forensics #legal
Hearsay
#forensics #digital-forensics #network-forensics #legal
Business Records
#forensics #digital-forensics #network-forensics #legal
Digital Evidence
#forensics #digital-forensics #network-forensics #legal
Real Evidence
#forensics #digital-forensics #network-forensics #legal
Circumstantial Evidence
#forensics #digital-forensics #network-forensics #legal
Best Evidence
#forensics #digital-forensics #network-forensics #legal
Investigative Event Log Discovery Strategy
#powershell #windows-event-logs #digital-forensics #investigation-strategy
PowerShell Get-Help Parameter Discovery
#powershell #get-help #cmdlet-discovery #digital-forensics
PowerShell Custom Objects
#powershell #objects #json #custom-objects
Select-Object
#powershell #select-object #pipeline #properties
PowerShell ForEach-Object CmdLet
#powershell #foreach-object #pipeline #cmdlet
PowerShell EventLog CmdLets
#powershell #forensics #event-logs #windows
Inspecting .NET Classes from PowerShell
#powershell #.net #reflection #discovery
PowerShell Network Configuration CmdLets
#powershell #networking #cmdlet #digital-forensics
Baseline in Digital Forensics
#forensics #baseline #powershell #investigation
Firewall Service Filter
#powershell #firewall #windows #network-security
Get-Member CmdLet
#powershell #cmdlet #investigation #pipeline
Designing Python Scripts for Automation and Pipelines
#python #automation #pipelines #scripting

2026-09-20 13:04 #powershell #cross-platform #linux #macos #dotnet-core #digital-forensics

PowerShell Cross-Platform

PowerShell was originally Windows-only because it was built on the .NET Framework. In 2016, Microsoft open-sourced PowerShell and rebuilt it on .NET Core, making it run on Windows, macOS, and Linux.

Two main versions

Version	Platform	Notes
Windows PowerShell	Windows only	Built into Windows; based on .NET Framework
PowerShell Core / PowerShell 7	Windows, macOS, Linux	Based on .NET Core / modern .NET

Why it matters for investigations

Mixed environments are common: Windows servers, Linux web servers, macOS endpoints.
Investigators can use a single command language to acquire data across platforms.
PowerShell pipelines and common CmdLet patterns transfer between systems.

Caveat

Some Windows-specific CmdLets still only work on Windows. Cross-platform support applies to the core engine and many common commands, but not every Windows-only feature.

PowerShell Cross-Platform

Two main versions

Why it matters for investigations

Caveat

Related Concepts