/ _ \ \_\(_)/_/ _//"\\_ more on JOHLEM.net / \ 0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0o0 ============================= NFS on Windows Investigation & Troubleshooting Cheat Sheet =========================== Filename: nfs_windows_investigation_cheatsheet.txt Command | Description ------------------------------------------------------|------------------------------------------------------------------------------------- Get-NfsClientConfiguration | Retrieve the current NFS client configuration. Set-NfsClientConfiguration -MountName -Value | Configure NFS client settings such as mount points. Get-NfsMappingStore | Retrieve NFS mapping store details (UID/GID to Windows user mappings). Add-NfsMappingStore -WindowsName -UnixUid -UnixGid | Map a Windows user to a specific UID/GID for NFS. Remove-NfsMappingStore -UnixUid | Remove a specific UID/GID mapping from the NFS mapping store. Get-NfsShare | List all NFS shares available on the server. New-NfsShare -Name -Path -AllowRootAccess | Create a new NFS share on the specified path. Remove-NfsShare -Name | Remove a specific NFS share from the server. Grant-NfsSharePermission -Name -ClientName -Permission readwrite | Set permissions for a specific NFS share. Revoke-NfsSharePermission -Name -ClientName | Revoke permissions from a specific client on an NFS share. Get-NfsMountedClient | Retrieve a list of clients currently connected to an NFS share. Showmount -e | Display the list of NFS shares exported by a specific server. Mount-NfsShare -Name -Path | Mount an NFS share to a local directory. Dismount-NfsShare -Name -Path | Dismount an NFS share from a local directory. Test-NfsShare -Name | Test the accessibility and permissions of an NFS share. Get-NfsStatistics | Retrieve statistics about NFS operations, including read/write operations. Restart-NfsServer | Restart the NFS server service. Get-Service -Name "Nfs*" | List the status of all NFS-related services on the server. Start-Service -Name "NfsService" | Start the NFS server service if it's stopped. Stop-Service -Name "NfsService" | Stop the NFS server service. Get-EventLog -LogName "System" -Source "Nfs*" | Retrieve NFS-related events from the System event log. Get-NfsOpenFile | List all currently open files on NFS shares. Disconnect-NfsSession -Client | Forcefully disconnect a client from an NFS share. Enable-NfsAudit | Enable auditing for NFS operations to track access and modifications. Get-NfsAuditSetting | Retrieve the current NFS audit settings. Set-NfsAuditSetting -AuditOperations | Configure specific operations to audit on NFS shares. Get-NfsServerConfiguration | Retrieve the current configuration of the NFS server. Set-NfsServerConfiguration -LogLevel | Set the logging level for the NFS server (e.g., Info, Warning, Error). Get-NfsNetworkLock | List all NFS network locks, useful for troubleshooting file access issues. Clear-NfsNetworkLock | Clear a specific NFS network lock. Test-Connection -ComputerName -Port 2049 | Test connectivity to an NFS server on the default NFS port (2049). Get-Process -Name "Nfs*" | List NFS-related processes running on the server. Get-NfsFileSystem | Retrieve information about the file system being used by an NFS share. Check-NfsServerHealth | Perform a health check on the NFS server and report any issues. ============================================================================================================