Get-XdrVulnerabilityManagementRemediationTasks
SYNOPSIS
Retrieves remediation tasks from Vulnerability Management.
SYNTAX
Default (Default)
Get-XdrVulnerabilityManagementRemediationTasks [-Force] [-ProgressAction <ActionPreference>]
[<CommonParameters>]
PreRemediation
Get-XdrVulnerabilityManagementRemediationTasks [-Force] [-PreRemediation] -Body <Object>
[-ProgressAction <ActionPreference>] [<CommonParameters>]
RecommendationExceptions
Get-XdrVulnerabilityManagementRemediationTasks [-Force] [-RecommendationExceptions]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
AllExceptions
Get-XdrVulnerabilityManagementRemediationTasks [-Force] [-AllExceptions] [-ProgressAction <ActionPreference>]
[<CommonParameters>]
AllExceptionsAggregated
Get-XdrVulnerabilityManagementRemediationTasks [-Force] [-AllExceptionsAggregated]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
BlockedApplications
Get-XdrVulnerabilityManagementRemediationTasks [-Force] [-BlockedApplications]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
BlockedApplicationsCount
Get-XdrVulnerabilityManagementRemediationTasks [-Force] [-BlockedApplicationsCount]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
BaselineExceptions
Get-XdrVulnerabilityManagementRemediationTasks [-Force] [-BaselineExceptions]
[-ProgressAction <ActionPreference>] [<CommonParameters>]
DESCRIPTION
Gets remediation task information from the Threat and Vulnerability Management (TVM) in Microsoft Defender XDR. This includes remediation tasks, exceptions, and blocked applications. This function includes caching support with a 30-minute TTL to reduce API calls.
EXAMPLES
EXAMPLE 1
Get-XdrVulnerabilityManagementRemediationTasks
Retrieves all remediation tasks using cached data if available.
EXAMPLE 2
Get-XdrVulnerabilityManagementRemediationTasks -Force
Forces a fresh retrieval of remediation tasks, bypassing the cache.
EXAMPLE 3
Get-XdrVulnerabilityManagementRemediationTasks -AllExceptionsAggregated
Retrieves aggregated exceptions data.
EXAMPLE 4
Get-XdrVulnerabilityManagementRemediationTasks -BlockedApplications
Retrieves list of blocked applications.
EXAMPLE 5
$body = @
groups = @()
modelName = "PreRemediationRequestBodyModel"
preRemediationArgs = @
category = "SecurityConfiguration"
modelName = "PreRemediationArgsModel"
preRemediationSecurityConfigurationArgs = @
modelName = "PreRemediationSecurityConfigurationArgsModel"
scid = "scid-79"
taskType = "ConfigurationChange"
relatedComponent = "deviceMisconfiguration"
Get-XdrVulnerabilityManagementRemediationTasks -PreRemediation -Body $body
Submits a pre-remediation request with the specified body.
PARAMETERS
-Force
Bypasses the cache and forces a fresh retrieval from the API.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-PreRemediation
Retrieves pre-remediation information. This is a POST endpoint.
Type: SwitchParameter
Parameter Sets: PreRemediation
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-RecommendationExceptions
Retrieves recommendation exceptions.
Type: SwitchParameter
Parameter Sets: RecommendationExceptions
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-AllExceptions
Retrieves all exceptions (non-aggregated).
Type: SwitchParameter
Parameter Sets: AllExceptions
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-AllExceptionsAggregated
Retrieves aggregated exceptions data.
Type: SwitchParameter
Parameter Sets: AllExceptionsAggregated
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-BlockedApplications
Retrieves blocked applications list.
Type: SwitchParameter
Parameter Sets: BlockedApplications
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-BlockedApplicationsCount
Retrieves count of blocked applications.
Type: SwitchParameter
Parameter Sets: BlockedApplicationsCount
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-BaselineExceptions
Retrieves baseline exceptions from organization settings.
Type: SwitchParameter
Parameter Sets: BaselineExceptions
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-Body
Request body for PreRemediation endpoint (POST request).
Type: Object
Parameter Sets: PreRemediation
Aliases:
Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-ProgressAction
The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.
Type: ActionPreference
Parameter Sets: (All)
Aliases: proga
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.