Observed arrival · 2026-11-12
CmdID makes command-line explanations show their sources
CmdID analyzes command lines and presents documentation-based explanations alongside abuse references and security detections.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Security analysts and administrators reviewing unfamiliar commands
- Worth noticing
- The page lists 1,614 Sigma process-creation rules and offers issue reports through the visitor’s own mail app.
Field notes
The input covers Windows, PowerShell, Linux, macOS, network devices, and cloud or container commands; examples include encoded PowerShell, LSASS dumps, Docker escapes, and Junos users. The page says it splits chains and wrappers into processes, quotes options from program references, and normalizes some obfuscation. Separate links point to source and licence notes, program pages, and security references.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue