Get-XdrVulnerabilityManagementBaseline
SYNOPSIS
Retrieves security baseline assessment data from Microsoft Defender XDR.
SYNTAX
ProfilesStatistics (Default)
Get-XdrVulnerabilityManagementBaseline [-ProfilesStatistics] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
ProfilesCompliance
Get-XdrVulnerabilityManagementBaseline [-ProfilesCompliance] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
TopFailingDevices
Get-XdrVulnerabilityManagementBaseline [-TopFailingDevices] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
AllSettingsResults
Get-XdrVulnerabilityManagementBaseline [-AllSettingsResults] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
AllSettingsFilters
Get-XdrVulnerabilityManagementBaseline [-AllSettingsFilters] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
AllSettingsStatistics
Get-XdrVulnerabilityManagementBaseline [-AllSettingsStatistics] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
Profiles
Get-XdrVulnerabilityManagementBaseline [-Profiles] [-Top <Int32>] [-Force] [-ProgressAction <ActionPreference>]
[<CommonParameters>]
ProfileFilters
Get-XdrVulnerabilityManagementBaseline [-ProfileFilters] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
OrgSettingsProfile
Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-OrgSettingsProfile] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
ProfileComplianceStatus
Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileComplianceStatus] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
ProfileDevices
Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileDevices] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
ProfileSettings
Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileSettings] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
ProfileDetails
Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileDetails] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
ProfileStatistics
Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileStatistics] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
DESCRIPTION
Retrieves various security baseline profile information including compliance status, statistics, settings, and device data. Supports multiple endpoint variants for comprehensive baseline assessment. This function includes caching support with a 30-minute TTL to reduce API calls.
EXAMPLES
EXAMPLE 1
Get-XdrVulnerabilityManagementBaseline -ProfilesStatistics
Retrieves statistics for all baseline profiles.
EXAMPLE 2
Get-XdrVulnerabilityManagementBaseline -Profiles
Retrieves a list of all baseline profiles.
EXAMPLE 3
Get-XdrVulnerabilityManagementBaseline -Profiles -Top 10
Retrieves the first 10 baseline profiles.
EXAMPLE 4
Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileDetails
Retrieves detailed information for a specific profile.
EXAMPLE 5
Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileStatistics
Retrieves statistics for a specific profile.
EXAMPLE 6
Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileDevices
Retrieves all devices for a specific profile with automatic pagination.
EXAMPLE 7
Get-XdrVulnerabilityManagementBaseline -AllSettingsResults
Retrieves results for all settings with default filtering.
EXAMPLE 8
Get-XdrVulnerabilityManagementBaseline -TopFailingDevices
Retrieves the top devices failing baseline assessments.
PARAMETERS
-ProfilesStatistics
Retrieves statistics for all baseline profiles.
Type: SwitchParameter
Parameter Sets: ProfilesStatistics
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProfilesCompliance
Retrieves compliance data for all baseline profiles with pagination support.
Type: SwitchParameter
Parameter Sets: ProfilesCompliance
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-TopFailingDevices
Retrieves the top devices failing baseline assessments.
Type: SwitchParameter
Parameter Sets: TopFailingDevices
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-AllSettingsResults
Retrieves results for all settings across all profiles with filtering and ordering.
Type: SwitchParameter
Parameter Sets: AllSettingsResults
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-AllSettingsFilters
Retrieves available filters for all settings queries.
Type: SwitchParameter
Parameter Sets: AllSettingsFilters
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-AllSettingsStatistics
Retrieves statistical data for all settings.
Type: SwitchParameter
Parameter Sets: AllSettingsStatistics
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-Profiles
Retrieves a list of all baseline profiles.
Type: SwitchParameter
Parameter Sets: Profiles
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProfileFilters
Retrieves available filters for profile queries (from orgsettings).
Type: SwitchParameter
Parameter Sets: ProfileFilters
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProfileId
The GUID of a specific baseline profile to query. Required when using profile-specific switches.
Type: String
Parameter Sets: OrgSettingsProfile, ProfileComplianceStatus, ProfileDevices, ProfileSettings, ProfileDetails, ProfileStatistics
Aliases:
Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-ProfileStatistics
Retrieves statistics for a specific profile. Requires -ProfileId.
Type: SwitchParameter
Parameter Sets: ProfileStatistics
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProfileDetails
Retrieves detailed information for a specific profile. Requires -ProfileId.
Type: SwitchParameter
Parameter Sets: ProfileDetails
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProfileSettings
Retrieves settings for a specific profile. Requires -ProfileId.
Type: SwitchParameter
Parameter Sets: ProfileSettings
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProfileDevices
Retrieves devices associated with a specific profile. Requires -ProfileId.
Type: SwitchParameter
Parameter Sets: ProfileDevices
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProfileComplianceStatus
Retrieves compliance status for a specific profile. Requires -ProfileId.
Type: SwitchParameter
Parameter Sets: ProfileComplianceStatus
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-OrgSettingsProfile
Retrieves organization settings for a specific profile. Requires -ProfileId.
Type: SwitchParameter
Parameter Sets: OrgSettingsProfile
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-Top
Limits the number of results returned for paginated endpoints. Useful for previewing data.
Type: Int32
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: 0
Accept pipeline input: False
Accept wildcard characters: False
-Force
Bypasses the cache and forces a fresh retrieval from the API.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProgressAction
The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.
Type: ActionPreference
Parameter Sets: (All)
Aliases: proga
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.