-
Notifications
You must be signed in to change notification settings - Fork 2
Get MdeUserAlerts
Jan-Henrik Damaschke edited this page Sep 17, 2022
·
1 revision
external help file: PSMDE-help.xml Module Name: PSMDE online version: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/get-user-related-alerts?view=o365-worldwide schema: 2.0.0
Retrieves a collection of alerts related to a given user ID.
Get-MdeUserAlerts [-id] <String> [<CommonParameters>]
Retrieves a collection of alerts related to a given user ID. The ID is not the full UPN, but only the user name. (for example, to retrieve alerts for user1@contoso.com use '-id user1').
Get-MdeUserAlerts -id 'user1'
Optional. Specifies the id of the target user.
Type: String
Parameter Sets: (All)
Aliases:
Required: True
Position: 1
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
PSCustomObject. The Get-MdeUserAlerts function returns a list of or a single PSCustomObject containing the parsed MDE machine object.
Author: Jan-Henrik Damaschke