All right. Hello and welcome to
Command Line.
In this video, we're going to go for
Windows System Commands three.
I'm Christopher Hallock and this
begin.
So we're learning objectives for
this video.
The first util command.
Understand the C command
and learn the checklist command.
Pretty assessment, the test check,
this command can be used to
potentially repair a hard drive, is
this true or false?
The answer is a true.
The check. This command can be used
to inspect the files sectors
of a hard drive
and potentially help repair them in
order to bring that hard drive back
to a working state.
And this is something that I used
very often as a system
administrator, and I was able to
help save a lot of files
for specific people.
All right, so we're gonna start with
the FSU util, these are filesystem
utilities.
This is a very expensive tool for
the Windows command line and it will
allow you to look at NTFS quota's.
You can see how to repair
specific parts of the filesystem.
You can also look at the US or
the uniform sequence number for
the NTFS journal
and what the NTFS journalese
is. As changes are made
to the file system, it keeps a
running log of these changes
to the disk.
That way, the file system can look
and make sure that before
the system shuts down, it makes
all these validations
and the changes to the file
system on the hard drive.
And we can also change the dirty bit
as well. Using FSU to
and now with a dirty bit is is
if the system shut off
in a non graceful manner
where the power was just
pulled completely or
something crazy went on and got a
blue screen, then the dirty
bit would be set on the NTFS
system.
And this says, hey, the system
did not shut down properly last
time, so you may need to check it in
order for it to work.
So let's pull up my command
prompt and let's
take a look at FSU to
slash questionmark.
It looks like that is not a valid
parameter, so it looks like we
have a whole bunch of different
information that we can do.
We can look at cuota repair.
He was in volume management.
So a lot of useful information.
And this is definitely more of a
system administrator tool than a
pen testing to
see system
file check.
Now, what this does is it searches
the protected system, files
through windows, the operating
system files, and it can help
recover any files that are corrupted
or not working properly.
So this is very useful.
If your operating system is not
working properly, we can use the SC.
It'll run through all of these
protected system files
and search for any that either
don't have the correct hash or
aren't healthy in that kind of
Windows aspect and help
replace them and hopefully working a
little better.
So this is a very useful command
that I highly recommend from the
Windows administrator side to
help troubleshoot any issues that
you or your user may be having.
And we have to check this command,
just check disk.
And this is used to validate
the actual sectors on the desk
instead of looking at the file
system.
And it does attempt to repair the
sector if you ask it to.
This is a very useful command to use
in the recovery mode for Windows.
If the system did not work properly,
we can go into the safe mode
and we can really check this command
and we can also ask it, hey, I
want you to look through all these
sectors.
And if you see something that
doesn't look right, I want you to
try and repair it the best you can.
And like I was saying at the
beginning of this video, I've used
this command a lot to help save
data for specific users.
And these are a bigger,
more important users for my
network, where they had some very
important data that I needed to
recover.
And I was able to use the checked
his command to properly boot
back into their system.
And we could copy those files and
give them backups.
So it's a very useful way
to kind of hopefully help save the
day if you've got something crazy
going on for a system.
So let's give a quick demonstration
of that as well.
Check this question
mark.
We have a lot of really good
switches for us as well, where
we can look at either specific
volumes or we can look at the
names as well.
And this is the US.
We're able to locate
the bad sectors and then recover
readable information.
So very useful.
This fixes the errors on the
disk as well.
So I highly recommend using this.
If you're having difficulty with
a computer booting properly, this
may save you and looking
like a real hero to your user
suppost assessment, which command is
used to validate and repair Windows
operating system files?
Is it a few to
be check disk see recovery
mode or D.
C.
The answer is D.
C.
System file check.
The big difference between this and
checked is that the MSFC
is specifically for the Windows
operating system files, not for the
rest of the disk.
So this is a very useful command
in order to use to help repair
a Windows system that may not be
functioning properly.
The recovery mode is a
mode to help run all of these
different commands, but it doesn't
necessarily validate and repair
those files by themselves.
The check this command could work,
but is not the specific purpose,
whereas the MSFC come
in its whole purpose specifically
for the Windows OS files.
And the util is
used to kind of look through the
file system, but not necessarily
help repair it as well as the other
two commands.
All right. So in this video, we
learned the FSU command, the
FC command, and we learned
about the check checklist command,
how we can use these for
our advantage.
And I hope to see you in the next
video.