Get-XdrVulnerabilityManagementChangeEvents
SYNOPSIS
Retrieves change events from Vulnerability Management.
SYNTAX
Default (Default)
Get-XdrVulnerabilityManagementChangeEvents [-Force] [-Top <Int32>] [-ProgressAction <ActionPreference>]
[<CommonParameters>]
CountOnly
Get-XdrVulnerabilityManagementChangeEvents [-Force] [-Top <Int32>] [-CountOnly]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
SummaryOnly
Get-XdrVulnerabilityManagementChangeEvents [-Force] [-Top <Int32>] [-SummaryOnly]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
DESCRIPTION
Gets change event information from Threat and Vulnerability Management (TVM) in Microsoft Defender XDR. This function includes caching support with a 30-minute TTL to reduce API calls. By default, returns all change event results with pagination handled automatically.
EXAMPLES
EXAMPLE 1
Get-XdrVulnerabilityManagementChangeEvents
Retrieves all change events with full pagination.
EXAMPLE 2
Get-XdrVulnerabilityManagementChangeEvents -Force
Forces a fresh retrieval of change events, bypassing the cache.
EXAMPLE 3
Get-XdrVulnerabilityManagementChangeEvents -Top 10
Returns only the first 10 change events.
EXAMPLE 4
Get-XdrVulnerabilityManagementChangeEvents -CountOnly
Returns only the total number of change events.
EXAMPLE 5
Get-XdrVulnerabilityManagementChangeEvents -SummaryOnly
Returns only the change event summary metadata.
PARAMETERS
-Force
Bypasses the cache and forces a fresh retrieval from the API.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-Top
Limits the number of results returned. Useful for previewing data without fetching all pages.
Type: Int32
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: 0
Accept pipeline input: False
Accept wildcard characters: False
-CountOnly
Returns only the total count of change events (numOfResults).
Type: SwitchParameter
Parameter Sets: CountOnly
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-SummaryOnly
Returns only the change event summary metadata (meta object).
Type: SwitchParameter
Parameter Sets: SummaryOnly
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProgressAction
The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.
Type: ActionPreference
Parameter Sets: (All)
Aliases: proga
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.