{
	"id": "01c655c6-cb22-457d-9807-3b3601e8f64f",
	"created_at": "2026-04-06T00:08:11.463974Z",
	"updated_at": "2026-04-10T03:21:08.514595Z",
	"deleted_at": null,
	"sha1_hash": "519770ca2e15ce0b511e837f6910c82c2c980f95",
	"title": "expand",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 44309,
	"plain_text": "expand\r\nBy robinharwood\r\nArchived: 2026-04-05 13:10:12 UTC\r\nApplies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012\r\nR2, Windows Server 2012\r\nExpands one or more compressed files. You can also use this command to retrieve compressed files from\r\ndistribution disks.\r\nThe expand command can also run from the Windows Recovery Console, using different parameters. For more\r\ninformation, see Windows Recovery Environment (WinRE).\r\nSyntax\r\nexpand [-r] \u003csource\u003e \u003cdestination\u003e\r\nexpand -r \u003csource\u003e [\u003cdestination\u003e]\r\nexpand -i \u003csource\u003e [\u003cdestination\u003e]\r\nexpand -d \u003csource\u003e.cab [-f:\u003cfiles\u003e]\r\nexpand \u003csource\u003e.cab -f:\u003cfiles\u003e \u003cdestination\u003e\r\nParameters\r\nParameter Description\r\n-r Renames expanded files.\r\nsource\r\nSpecifies the files to expand. Source can consist of a drive letter and colon, a directory name, a\r\nfile name, or a combination of these. You can use wildcards (* or ?).\r\ndestination\r\nSpecifies where files are to be expanded.\r\nIf source consists of multiple files and you don't specify -r, the destination must be a directory\r\nthat already exists. Destination can consist of a drive letter and colon, a directory name, a file\r\nname, or a combination of these. Destination file \\| path specification.\r\n-i Renames expanded files but ignores the directory structure.\r\n-d Displays a list of files in the source location. Doesn't expand or extract the files.\r\n-f:\r\n\u003cfiles\u003e\r\nSpecifies the files in a cabinet (.cab) file that you want to expand. You can use wildcards (* or\r\n?).\r\nhttps://docs.microsoft.com/en-us/windows-server/administration/windows-commands/expand\r\nPage 1 of 2\n\nParameter Description\r\n/? Displays help at the command prompt.\r\nRelated links\r\nCommand-Line Syntax Key\r\nSource: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/expand\r\nhttps://docs.microsoft.com/en-us/windows-server/administration/windows-commands/expand\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/expand"
	],
	"report_names": [
		"expand"
	],
	"threat_actors": [],
	"ts_created_at": 1775434091,
	"ts_updated_at": 1775791268,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/519770ca2e15ce0b511e837f6910c82c2c980f95.pdf",
		"text": "https://archive.orkl.eu/519770ca2e15ce0b511e837f6910c82c2c980f95.txt",
		"img": "https://archive.orkl.eu/519770ca2e15ce0b511e837f6910c82c2c980f95.jpg"
	}
}