# Filename ## Local ### Filenames
CommandDescription
where /R C:\Users\ "keyword*"Recursive search for a keyword (CMD only).
dir /s /b <filename>Recursive search for a filename with full path.
dir <filename>*Lists files in the current directory with a name starting with <filename>.
dir <path>\<filename>*Lists files in the specified path with a name starting with <filename>.
Get-ChildItem C:\Users *readme* -RecurseRecursive search with PowerShell.
Get-ChildItem -Path <path> -Filter <filename>*Lists files in the specified path matching the filter <filename>*. More efficient than -Include.
Get-ChildItem -Path <path> -Include <filename>*Lists files in the specified path including files matching the pattern <filename>*. Allows more complex patterns than -Filter.
Get-ChildItem -Path <path> -Exclude <filename>*Lists files in the specified path excluding files matching the pattern <filename>*.
findstr /s /i /m "search_string"Recursive search for a string (CMD only), case-insensitive.
for /R %f in (<filename>*) do @echo %fRecursive for-loop in CMD.
Where-Object { $_.Name -like "<filename>*" }Filters objects by name match in PowerShell.
Find files by name/partial name (WMI). ```powershell Get-CimInstance -ClassName CIM_DataFile -Filter "Name LIKE '%%'" ``` Find file names and paths by name/partial name (WMI). ```powershell wmic datafile where Name like '%%' get Name, FileName ``` Find all files with a particular name: ```powershell Get-ChildItem "C:\\Users\\" recurse -include \*passwords\*.txt ``` Searches only non-system files recursively: {% code overflow="wrap" %} ```powershell Get-ChildItem -Path -Recurse | Where-Object { $_.Attributes -match 'Archive' } | Select-String -Pattern ``` {% endcode %} ### File Extensions Multiple extensions: ```powershell Get-ChildItem -Path C:\Documents -Recurse -Include "*.txt", "*.docx" ``` ### Remote Find applications that begin with Google: {% code overflow="wrap" %} ```powershell Get-WmiObject Win32_Product -computername win7 -credential fred -filter "Name like '%Google%'" ``` {% endcode %} Uninstall applications that begin with Google: {% code overflow="wrap" %} ```powershell (Get-WmiObject Win32_Product -computername win7 -credential fred -filter "Name like '%Google%'").Uninstall() ``` {% endcode %} ## Content Go-to Command: ```powershell findstr /s /i /n /p "keyword" *.* ``` `/s` Recursive `/i` Case-insensitive `/n` Displays line numbers with output `/p` Skips files with non-printable characters `*.*` Searches all files Recursive: ```powershell gci -Recurse | sls "keyword" ``` Recursive, case-insensitive: ```powershell findstr /s /i "keyword" *.* ``` Searches for entire lines matching the string: ```powershell findstr /s /m ``` Searches only text files recursively: {% code overflow="wrap" %} ```powershell Get-ChildItem -Path -Recurse -Include *.txt | Select-String -Pattern ``` {% endcode %} Searches all files for a keyword across the entire C: drive, returning only files that contain the keyword: {% code overflow="wrap" %} ```powershell Get-ChildItem -Path C:\ -Recurse | Where-Object { $_ | Select-String -Pattern "keyword" -Quiet } ``` {% endcode %} Searches for a keyword in files under a specified directory and lists each file only once if the keyword is found: {% code overflow="wrap" %} ```powershell Get-ChildItem -Path C:\path\to\directory -Recurse | Select-String -Pattern "keyword" -List ``` {% endcode %} Additional Tips: Use regular expressions with findstr for advanced pattern matching. ## Users (Owners) Lists files owned by a specific username, recursively: ```powershell dir /q /s /o:n | findstr /i "Owner: " ``` ```powershell Get-ChildItem -Path -Recurse -Owner ``` {% code overflow="wrap" %} ```powershell Get-ChildItem -Recurse | ForEach-Object { Get-Acl $_.FullName } | Select-Object Path, Owner ``` {% endcode %} Lists files owned by a specific username on the local system: ```powershell wmic datafile where owner='' get Name, FileName ``` Lists files where the owner's SID (Security Identifier) matches the specified username: {% code overflow="wrap" %} ```powershell Get-ChildItem -Path -Recurse -ErrorAction SilentlyContinue | Where-Object { $_.GetAccessControl().Owner.Owner -eq "" } ``` {% endcode %} Lists files created by a specific username within a specified date range: {% code overflow="wrap" %} ```powershell wmic datafile where (owner='' and CreationDate >= and CreationDate <= ) get Name, FileName ``` {% endcode %} Lists files with specific permissions for a user, recursively: {% code overflow="wrap" %} ```powershell Get-ChildItem -Path -Recurse -File | Where-Object { $_.GetAccessControl().Access.IdentityReference -like "*" } | Select-Object FullName ``` {% endcode %} ### Windows Search (GUI) Open File Explorer, navigate to the desired directory. In the search bar, type `created:` (replace with the actual username). Optionally, filter by date range using created:`..`. Additional Tips: Replace with the actual username you're searching for. Use wildcards (\*) in the username to match partial names. For a case-insensitive search in PowerShell, use `-imatch` or `-ilike` instead of `=`. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://www.shellspells.net/windows/file-ops/search/filename.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.