Skip to main content

Get-XdrActionsCenterPending

SYNOPSIS

Retrieves pending actions from the Microsoft Defender XDR Action Center.

SYNTAX

Get-XdrActionsCenterPending [[-SortByField] <String>] [[-SortOrder] <String>] [[-PageIndex] <Int32>]
[[-PageSize] <Int32>] [[-UseMtpApi] <Boolean>] [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION

Gets a list of pending actions from the Microsoft Defender XDR Action Center with options to sort and paginate the results.

EXAMPLES

EXAMPLE 1

Get-XdrActionsCenterPending
Retrieves pending actions from the Action Center with default settings.

EXAMPLE 2

Get-XdrActionsCenterPending -PageSize 50 -PageIndex 2
Retrieves the second page of 50 pending actions.

EXAMPLE 3

Get-XdrActionsCenterPending -SortByField "ActionUpdateTime" -SortOrder "Ascending"
Retrieves pending actions sorted by action update time in ascending order.

PARAMETERS

-SortByField

The field to sort actions by. Valid values are: InvestigationId, ApprovalId, ActionType, EntityType, Asset, Decision, DecidedBy, ActionSource, Status, ActionUpdateTime. Defaults to 'ActionUpdateTime'.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: 1
Default value: ActionUpdateTime
Accept pipeline input: False
Accept wildcard characters: False

-SortOrder

The sort order for results. Valid values are 'Ascending' or 'Descending'. Defaults to 'Descending'.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: 2
Default value: Descending
Accept pipeline input: False
Accept wildcard characters: False

-PageIndex

The page index for pagination. Defaults to 1.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: 3
Default value: 1
Accept pipeline input: False
Accept wildcard characters: False

-PageSize

The number of actions to return per page. Defaults to 100.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: 4
Default value: 100
Accept pipeline input: False
Accept wildcard characters: False

-UseMtpApi

Whether to use the MTP API. Defaults to $true.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: 5
Default value: True
Accept pipeline input: False
Accept wildcard characters: False

-ProgressAction

The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

Object

Returns the pending actions from the Action Center.

NOTES