Interesting project to document the common "malicious" command-line executions of different tools and utilities.

https://github.com/3CORESec/MAL-CL

Windows Command-Line Obfuscation

https://www.wietzebeukema.nl/blog/windows-command-line-obfuscation