PowerShell intelligence paths
Future references will preserve module and object behavior rather than presenting commands as unexplained text.
Get-Command and Get-Help
Confirm command availability, module ownership, syntax, and examples.
ServicesGet-Service and service evidence
Inspect names, status, dependencies, and the responsible component.
EventsGet-WinEvent queries
Filter by provider, channel, event ID, time, and structured payload.
DevicesPnP and driver inventory
Collect instance IDs and package evidence without guessing compatibility.
RepairDISM and Windows cmdlets
Use supported Windows servicing interfaces with captured results.
SafetyWhatIf, Confirm, and scope
Preview supported changes and understand local, remote, and pipeline impact.
How WinLab approaches this category
A consistent evidence path keeps future report batches useful and navigable.
Preserve the exact name, code, event, device, command, or Windows component involved.
Match official definitions with version, timestamp, system context, and reproducible symptoms.
Use the owning publisher or supported Windows path, then retest the same operation.
Source and safety boundary: Cmdlet documentation must match the applicable Microsoft module and PowerShell edition. Reports label privileges, remote impact, destructive behavior, and version differences explicitly.