cyber-ir.com
Windows Commands abused by attackers (Japan CERT)
One more interesting article about the most abused commands in windows. It is a must read if you are interesting in endpoint hunting.