Skip to main content

Get-XdrEndpointDeviceLiveResponseLibrary

SYNOPSIS​

Retrieves the Live Response library files from Microsoft Defender XDR.

SYNTAX​

Get-XdrEndpointDeviceLiveResponseLibrary [-Force] [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION​

Gets the list of files available in the Live Response library. These files can be used with the 'putfile' and 'run' commands during Live Response sessions. Results are cached for 15 minutes.

EXAMPLES​

EXAMPLE 1​

Get-XdrEndpointDeviceLiveResponseLibrary
Lists all files in the Live Response library.

EXAMPLE 2​

Get-XdrEndpointDeviceLiveResponseLibrary -Force
Forces a fresh retrieval of the library file list.

PARAMETERS​

-Force​

Bypasses the cache and forces a fresh retrieval from the API.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProgressAction​

The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

Object​

Returns the library file listing.​

NOTES​