Hyper-v Powershell操作 及内存dump
hyper-v安装不介绍，可以在vmware虚拟机中的win10/win11中安装
控制面板，添加或删除功能
注意在虚拟机中新建虚拟机时需要选择一代，即可顺利引导启动
命令指南
PS C:\Users\admin> Get-Command | Where-Object Source -eq "Hyper-V"
CommandType Name Version Source
----------- ---- ------- ------
Alias Export-VMCheckpoint 2.0.0.0 Hyper-V
Alias Get-VMCheckpoint 2.0.0.0 Hyper-V
Alias Remove-VMCheckpoint 2.0.0.0 Hyper-V
Alias Rename-VMCheckpoint 2.0.0.0 Hyper-V
Alias Restore-VMCheckpoint 2.0.0.0 Hyper-V
Cmdlet Add-VMAssignableDevice 2.0.0.0 Hyper-V
Cmdlet Add-VMDvdDrive 2.0.0.0 Hyper-V
Cmdlet Add-VMFibreChannelHba 2.0.0.0 Hyper-V
Cmdlet Add-VMGpuPartitionAdapter 2.0.0.0 Hyper-V
Cmdlet Add-VMGroupMember 2.0.0.0 Hyper-V
Cmdlet Add-VMHardDiskDrive 2.0.0.0 Hyper-V
Cmdlet Add-VMHostAssignableDevice 2.0.0.0 Hyper-V
Cmdlet Add-VMKeyStorageDrive 2.0.0.0 Hyper-V
Cmdlet Add-VMMigrationNetwork 2.0.0.0 Hyper-V
Cmdlet Add-VMNetworkAdapter 2.0.0.0 Hyper-V
Cmdlet Add-VMNetworkAdapterAcl 2.0.0.0 Hyper-V
Cmdlet Add-VMNetworkAdapterExtendedAcl 2.0.0.0 Hyper-V
Cmdlet Add-VMNetworkAdapterRoutingDomainMapping 2.0.0.0 Hyper-V
Cmdlet Add-VMPmemController 2.0.0.0 Hyper-V
Cmdlet Add-VMRemoteFx3dVideoAdapter 2.0.0.0 Hyper-V
Cmdlet Add-VMScsiController 2.0.0.0 Hyper-V
Cmdlet Add-VMStoragePath 2.0.0.0 Hyper-V
Cmdlet Add-VMSwitch 2.0.0.0 Hyper-V
Cmdlet Add-VMSwitchExtensionPortFeature 2.0.0.0 Hyper-V
Cmdlet Add-VMSwitchExtensionSwitchFeature 2.0.0.0 Hyper-V
Cmdlet Add-VMSwitchTeamMember 2.0.0.0 Hyper-V
Cmdlet Checkpoint-VM 2.0.0.0 Hyper-V
Cmdlet Compare-VM 2.0.0.0 Hyper-V
Cmdlet Complete-VMFailover 2.0.0.0 Hyper-V
Cmdlet Connect-VMNetworkAdapter 2.0.0.0 Hyper-V
Cmdlet Connect-VMSan 2.0.0.0 Hyper-V
Cmdlet Convert-VHD 2.0.0.0 Hyper-V
Cmdlet Copy-VMFile 2.0.0.0 Hyper-V
Cmdlet Debug-VM 2.0.0.0 Hyper-V
Cmdlet Disable-VMConsoleSupport 2.0.0.0 Hyper-V
Cmdlet Disable-VMEventing 2.0.0.0 Hyper-V
Cmdlet Disable-VMIntegrationService 2.0.0.0 Hyper-V
Cmdlet Disable-VMMigration 2.0.0.0 Hyper-V
Cmdlet Disable-VMRemoteFXPhysicalVideoAdapter 2.0.0.0 Hyper-V
Cmdlet Disable-VMResourceMetering 2.0.0.0 Hyper-V
Cmdlet Disable-VMSwitchExtension 2.0.0.0 Hyper-V
Cmdlet Disable-VMTPM 2.0.0.0 Hyper-V
Cmdlet Disconnect-VMNetworkAdapter 2.0.0.0 Hyper-V
Cmdlet Disconnect-VMSan 2.0.0.0 Hyper-V
Cmdlet Dismount-VHD 2.0.0.0 Hyper-V
Cmdlet Dismount-VMHostAssignableDevice 2.0.0.0 Hyper-V
Cmdlet Enable-VMConsoleSupport 2.0.0.0 Hyper-V
Cmdlet Enable-VMEventing 2.0.0.0 Hyper-V
Cmdlet Enable-VMIntegrationService 2.0.0.0 Hyper-V
Cmdlet Enable-VMMigration 2.0.0.0 Hyper-V
Cmdlet Enable-VMRemoteFXPhysicalVideoAdapter 2.0.0.0 Hyper-V
Cmdlet Enable-VMReplication 2.0.0.0 Hyper-V
Cmdlet Enable-VMResourceMetering 2.0.0.0 Hyper-V
Cmdlet Enable-VMSwitchExtension 2.0.0.0 Hyper-V
Cmdlet Enable-VMTPM 2.0.0.0 Hyper-V
Cmdlet Export-VM 2.0.0.0 Hyper-V
Cmdlet Export-VMSnapshot 2.0.0.0 Hyper-V
Cmdlet Get-VHD 2.0.0.0 Hyper-V
Cmdlet Get-VHDSet 2.0.0.0 Hyper-V
Cmdlet Get-VHDSnapshot 2.0.0.0 Hyper-V
Cmdlet Get-VM 2.0.0.0 Hyper-V
Cmdlet Get-VMAssignableDevice 2.0.0.0 Hyper-V
Cmdlet Get-VMBios 2.0.0.0 Hyper-V
Cmdlet Get-VMComPort 2.0.0.0 Hyper-V
Cmdlet Get-VMConnectAccess 2.0.0.0 Hyper-V
Cmdlet Get-VMDvdDrive 2.0.0.0 Hyper-V
Cmdlet Get-VMFibreChannelHba 2.0.0.0 Hyper-V
Cmdlet Get-VMFirmware 2.0.0.0 Hyper-V
Cmdlet Get-VMFloppyDiskDrive 2.0.0.0 Hyper-V
Cmdlet Get-VMGpuPartitionAdapter 2.0.0.0 Hyper-V
Cmdlet Get-VMGroup 2.0.0.0 Hyper-V
Cmdlet Get-VMHardDiskDrive 2.0.0.0 Hyper-V
Cmdlet Get-VMHost 2.0.0.0 Hyper-V
Cmdlet Get-VMHostAssignableDevice 2.0.0.0 Hyper-V
Cmdlet Get-VMHostCluster 2.0.0.0 Hyper-V
Cmdlet Get-VMHostNumaNode 2.0.0.0 Hyper-V
Cmdlet Get-VMHostNumaNodeStatus 2.0.0.0 Hyper-V
Cmdlet Get-VMHostPartitionableGpu 2.0.0.0 Hyper-V
Cmdlet Get-VMHostSupportedVersion 2.0.0.0 Hyper-V
Cmdlet Get-VMIdeController 2.0.0.0 Hyper-V
Cmdlet Get-VMIntegrationService 2.0.0.0 Hyper-V
Cmdlet Get-VMKeyProtector 2.0.0.0 Hyper-V
Cmdlet Get-VMKeyStorageDrive 2.0.0.0 Hyper-V
Cmdlet Get-VMMemory 2.0.0.0 Hyper-V
Cmdlet Get-VMMigrationNetwork 2.0.0.0 Hyper-V
Cmdlet Get-VMNetworkAdapter 2.0.0.0 Hyper-V
Cmdlet Get-VMNetworkAdapterAcl 2.0.0.0 Hyper-V
Cmdlet Get-VMNetworkAdapterExtendedAcl 2.0.0.0 Hyper-V
Cmdlet Get-VMNetworkAdapterFailoverConfiguration 2.0.0.0 Hyper-V
Cmdlet Get-VMNetworkAdapterIsolation 2.0.0.0 Hyper-V
Cmdlet Get-VMNetworkAdapterRdma 2.0.0.0 Hyper-V
Cmdlet Get-VMNetworkAdapterRoutingDomainMapping 2.0.0.0 Hyper-V
Cmdlet Get-VMNetworkAdapterTeamMapping 2.0.0.0 Hyper-V
Cmdlet Get-VMNetworkAdapterVlan 2.0.0.0 Hyper-V
Cmdlet Get-VMPartitionableGpu 2.0.0.0 Hyper-V
Cmdlet Get-VMPmemController 2.0.0.0 Hyper-V
Cmdlet Get-VMProcessor 2.0.0.0 Hyper-V
Cmdlet Get-VMRemoteFx3dVideoAdapter 2.0.0.0 Hyper-V
Cmdlet Get-VMRemoteFXPhysicalVideoAdapter 2.0.0.0 Hyper-V
Cmdlet Get-VMReplication 2.0.0.0 Hyper-V
Cmdlet Get-VMReplicationAuthorizationEntry 2.0.0.0 Hyper-V
Cmdlet Get-VMReplicationServer 2.0.0.0 Hyper-V
Cmdlet Get-VMResourcePool 2.0.0.0 Hyper-V
Cmdlet Get-VMSan 2.0.0.0 Hyper-V
Cmdlet Get-VMScsiController 2.0.0.0 Hyper-V
Cmdlet Get-VMSecurity 2.0.0.0 Hyper-V
Cmdlet Get-VMSnapshot 2.0.0.0 Hyper-V
Cmdlet Get-VMStoragePath 2.0.0.0 Hyper-V
Cmdlet Get-VMStorageSettings 2.0.0.0 Hyper-V
Cmdlet Get-VMSwitch 2.0.0.0 Hyper-V
Cmdlet Get-VMSwitchExtension 2.0.0.0 Hyper-V
Cmdlet Get-VMSwitchExtensionPortData 2.0.0.0 Hyper-V
Cmdlet Get-VMSwitchExtensionPortFeature 2.0.0.0 Hyper-V
Cmdlet Get-VMSwitchExtensionSwitchData 2.0.0.0 Hyper-V
Cmdlet Get-VMSwitchExtensionSwitchFeature 2.0.0.0 Hyper-V
Cmdlet Get-VMSwitchTeam 2.0.0.0 Hyper-V
Cmdlet Get-VMSystemSwitchExtension 2.0.0.0 Hyper-V
Cmdlet Get-VMSystemSwitchExtensionPortFeature 2.0.0.0 Hyper-V
Cmdlet Get-VMSystemSwitchExtensionSwitchFeature 2.0.0.0 Hyper-V
Cmdlet Get-VMVideo 2.0.0.0 Hyper-V
Cmdlet Grant-VMConnectAccess 2.0.0.0 Hyper-V
Cmdlet Import-VM 2.0.0.0 Hyper-V
Cmdlet Import-VMInitialReplication 2.0.0.0 Hyper-V
Cmdlet Measure-VM 2.0.0.0 Hyper-V
Cmdlet Measure-VMReplication 2.0.0.0 Hyper-V
Cmdlet Measure-VMResourcePool 2.0.0.0 Hyper-V
Cmdlet Merge-VHD 2.0.0.0 Hyper-V
Cmdlet Mount-VHD 2.0.0.0 Hyper-V
Cmdlet Mount-VMHostAssignableDevice 2.0.0.0 Hyper-V
Cmdlet Move-VM 2.0.0.0 Hyper-V
Cmdlet Move-VMStorage 2.0.0.0 Hyper-V
Cmdlet New-VFD 2.0.0.0 Hyper-V
Cmdlet New-VHD 2.0.0.0 Hyper-V
Cmdlet New-VM 2.0.0.0 Hyper-V
Cmdlet New-VMGroup 2.0.0.0 Hyper-V
Cmdlet New-VMReplicationAuthorizationEntry 2.0.0.0 Hyper-V
Cmdlet New-VMResourcePool 2.0.0.0 Hyper-V
Cmdlet New-VMSan 2.0.0.0 Hyper-V
Cmdlet New-VMSwitch 2.0.0.0 Hyper-V
Cmdlet Optimize-VHD 2.0.0.0 Hyper-V
Cmdlet Optimize-VHDSet 2.0.0.0 Hyper-V
Cmdlet Remove-VHDSnapshot 2.0.0.0 Hyper-V
Cmdlet Remove-VM 2.0.0.0 Hyper-V
Cmdlet Remove-VMAssignableDevice 2.0.0.0 Hyper-V
Cmdlet Remove-VMDvdDrive 2.0.0.0 Hyper-V
Cmdlet Remove-VMFibreChannelHba 2.0.0.0 Hyper-V
Cmdlet Remove-VMGpuPartitionAdapter 2.0.0.0 Hyper-V
Cmdlet Remove-VMGroup 2.0.0.0 Hyper-V
Cmdlet Remove-VMGroupMember 2.0.0.0 Hyper-V
Cmdlet Remove-VMHardDiskDrive 2.0.0.0 Hyper-V
Cmdlet Remove-VMHostAssignableDevice 2.0.0.0 Hyper-V
Cmdlet Remove-VMKeyStorageDrive 2.0.0.0 Hyper-V
Cmdlet Remove-VMMigrationNetwork 2.0.0.0 Hyper-V
Cmdlet Remove-VMNetworkAdapter 2.0.0.0 Hyper-V
Cmdlet Remove-VMNetworkAdapterAcl 2.0.0.0 Hyper-V
Cmdlet Remove-VMNetworkAdapterExtendedAcl 2.0.0.0 Hyper-V
Cmdlet Remove-VMNetworkAdapterRoutingDomainMapping 2.0.0.0 Hyper-V
Cmdlet Remove-VMNetworkAdapterTeamMapping 2.0.0.0 Hyper-V
Cmdlet Remove-VMPmemController 2.0.0.0 Hyper-V
Cmdlet Remove-VMRemoteFx3dVideoAdapter 2.0.0.0 Hyper-V
Cmdlet Remove-VMReplication 2.0.0.0 Hyper-V
Cmdlet Remove-VMReplicationAuthorizationEntry 2.0.0.0 Hyper-V
Cmdlet Remove-VMResourcePool 2.0.0.0 Hyper-V
Cmdlet Remove-VMSan 2.0.0.0 Hyper-V
Cmdlet Remove-VMSavedState 2.0.0.0 Hyper-V
Cmdlet Remove-VMScsiController 2.0.0.0 Hyper-V
Cmdlet Remove-VMSnapshot 2.0.0.0 Hyper-V
Cmdlet Remove-VMStoragePath 2.0.0.0 Hyper-V
Cmdlet Remove-VMSwitch 2.0.0.0 Hyper-V
Cmdlet Remove-VMSwitchExtensionPortFeature 2.0.0.0 Hyper-V
Cmdlet Remove-VMSwitchExtensionSwitchFeature 2.0.0.0 Hyper-V
Cmdlet Remove-VMSwitchTeamMember 2.0.0.0 Hyper-V
Cmdlet Rename-VM 2.0.0.0 Hyper-V
Cmdlet Rename-VMGroup 2.0.0.0 Hyper-V
Cmdlet Rename-VMNetworkAdapter 2.0.0.0 Hyper-V
Cmdlet Rename-VMResourcePool 2.0.0.0 Hyper-V
Cmdlet Rename-VMSan 2.0.0.0 Hyper-V
Cmdlet Rename-VMSnapshot 2.0.0.0 Hyper-V
Cmdlet Rename-VMSwitch 2.0.0.0 Hyper-V
Cmdlet Repair-VM 2.0.0.0 Hyper-V
Cmdlet Reset-VMReplicationStatistics 2.0.0.0 Hyper-V
Cmdlet Reset-VMResourceMetering 2.0.0.0 Hyper-V
Cmdlet Resize-VHD 2.0.0.0 Hyper-V
Cmdlet Restart-VM 2.0.0.0 Hyper-V
Cmdlet Restore-VMSnapshot 2.0.0.0 Hyper-V
Cmdlet Resume-VM 2.0.0.0 Hyper-V
Cmdlet Resume-VMReplication 2.0.0.0 Hyper-V
Cmdlet Revoke-VMConnectAccess 2.0.0.0 Hyper-V
Cmdlet Save-VM 2.0.0.0 Hyper-V
Cmdlet Set-VHD 2.0.0.0 Hyper-V
Cmdlet Set-VM 2.0.0.0 Hyper-V
Cmdlet Set-VMBios 2.0.0.0 Hyper-V
Cmdlet Set-VMComPort 2.0.0.0 Hyper-V
Cmdlet Set-VMDvdDrive 2.0.0.0 Hyper-V
Cmdlet Set-VMFibreChannelHba 2.0.0.0 Hyper-V
Cmdlet Set-VMFirmware 2.0.0.0 Hyper-V
Cmdlet Set-VMFloppyDiskDrive 2.0.0.0 Hyper-V
Cmdlet Set-VMGpuPartitionAdapter 2.0.0.0 Hyper-V
Cmdlet Set-VMHardDiskDrive 2.0.0.0 Hyper-V
Cmdlet Set-VMHost 2.0.0.0 Hyper-V
Cmdlet Set-VMHostCluster 2.0.0.0 Hyper-V
Cmdlet Set-VMHostPartitionableGpu 2.0.0.0 Hyper-V
Cmdlet Set-VMKeyProtector 2.0.0.0 Hyper-V
Cmdlet Set-VMKeyStorageDrive 2.0.0.0 Hyper-V
Cmdlet Set-VMMemory 2.0.0.0 Hyper-V
Cmdlet Set-VMMigrationNetwork 2.0.0.0 Hyper-V
Cmdlet Set-VMNetworkAdapter 2.0.0.0 Hyper-V
Cmdlet Set-VMNetworkAdapterFailoverConfiguration 2.0.0.0 Hyper-V
Cmdlet Set-VMNetworkAdapterIsolation 2.0.0.0 Hyper-V
Cmdlet Set-VMNetworkAdapterRdma 2.0.0.0 Hyper-V
Cmdlet Set-VMNetworkAdapterRoutingDomainMapping 2.0.0.0 Hyper-V
Cmdlet Set-VMNetworkAdapterTeamMapping 2.0.0.0 Hyper-V
Cmdlet Set-VMNetworkAdapterVlan 2.0.0.0 Hyper-V
Cmdlet Set-VMPartitionableGpu 2.0.0.0 Hyper-V
Cmdlet Set-VMProcessor 2.0.0.0 Hyper-V
Cmdlet Set-VMRemoteFx3dVideoAdapter 2.0.0.0 Hyper-V
Cmdlet Set-VMReplication 2.0.0.0 Hyper-V
Cmdlet Set-VMReplicationAuthorizationEntry 2.0.0.0 Hyper-V
Cmdlet Set-VMReplicationServer 2.0.0.0 Hyper-V
Cmdlet Set-VMResourcePool 2.0.0.0 Hyper-V
Cmdlet Set-VMSan 2.0.0.0 Hyper-V
Cmdlet Set-VMSecurity 2.0.0.0 Hyper-V
Cmdlet Set-VMSecurityPolicy 2.0.0.0 Hyper-V
Cmdlet Set-VMStorageSettings 2.0.0.0 Hyper-V
Cmdlet Set-VMSwitch 2.0.0.0 Hyper-V
Cmdlet Set-VMSwitchExtensionPortFeature 2.0.0.0 Hyper-V
Cmdlet Set-VMSwitchExtensionSwitchFeature 2.0.0.0 Hyper-V
Cmdlet Set-VMSwitchTeam 2.0.0.0 Hyper-V
Cmdlet Set-VMVideo 2.0.0.0 Hyper-V
Cmdlet Start-VM 2.0.0.0 Hyper-V
Cmdlet Start-VMFailover 2.0.0.0 Hyper-V
Cmdlet Start-VMInitialReplication 2.0.0.0 Hyper-V
Cmdlet Start-VMTrace 2.0.0.0 Hyper-V
Cmdlet Stop-VM 2.0.0.0 Hyper-V
Cmdlet Stop-VMFailover 2.0.0.0 Hyper-V
Cmdlet Stop-VMInitialReplication 2.0.0.0 Hyper-V
Cmdlet Stop-VMReplication 2.0.0.0 Hyper-V
Cmdlet Stop-VMTrace 2.0.0.0 Hyper-V
Cmdlet Suspend-VM 2.0.0.0 Hyper-V
Cmdlet Suspend-VMReplication 2.0.0.0 Hyper-V
Cmdlet Test-VHD 2.0.0.0 Hyper-V
Cmdlet Test-VMNetworkAdapter 2.0.0.0 Hyper-V
Cmdlet Test-VMReplicationConnection 2.0.0.0 Hyper-V
Cmdlet Update-VMVersion 2.0.0.0 Hyper-V
Cmdlet Wait-VM 2.0.0.0 Hyper-V
参考链接：https://docs.microsoft.com/en-us/powershell/module/hyper-v/get-vmmemory?view=windowsserver2019-ps
更多操作及参数说明可以查看此链接
基本信息获取
# 获取运行的虚拟机
PS C:\Users\admin> Get-VM
Name State CPUUsage(%) MemoryAssigned(M) Uptime Status Version
---- ----- ----------- ----------------- ------ ------ -------
Win10test1 Running 5 1542 00:17:02.2940000 正常运行 10.0
虚拟机操作
# 启动
Start-VM -Name 'Win10test1'
# 关闭
Stop-VM -Name 'Win10test1' –Force
# 获取内存信息
PS C:\Users\admin> Get-VMMemory 'Win10test1'
VMName DynamicMemoryEnabled Minimum(M) Startup(M) Maximum(M)
------ -------------------- ---------- ---------- ----------
Win10test1 True 512 4096 1048576
快照操作
# 检查快照
Get-VMSnapshot -VMName 'Win10test1'
VMName Name SnapshotType CreationTime ParentSnapshotName
------ ---- ------------ ------------ ------------------
Win10test1 自动检查点 - Win10test1 - (2021/9/27 - 14:38:55) Standard 2021/9/27 14:38:56
Win10test1 Win10test1 - (2021/9/27 - 14:53:43) Standard 2021/9/27 14:53:46 自动检查点 - Win10test1 ...
# 创建快照
Checkpoint-VM -Name 'Win10test1' -SnapshotName Update1
# 删除指定快照
Get-VM 'Win10test1' | Remove-VMSnapshot -Name Update*
.vmrs文件为内存
虚拟机内存操作
https://docs.microsoft.com/zh-cn/sysinternals/downloads/livekd
# 查看运行的虚拟机
.\livekd.exe -hvl
# 转储文件
livekd -hv <VMName> -p -o C:\Memory.dmp
# 转储dmp文件
PS E:\Windows Kits\10\Debuggers\x64> .\livekd.exe -k "E:\Windows Kits\10\Debuggers\x64\kd.exe" -o c:\users\admin\Desktop\Win10test1.dmp -hv 'Win10test1' -p
微软近日宣布了名为 “Project Freta” 的全新反恶意软件服务，可直接分析.vmrs文件