Get-XdrCloudAppsApp
SYNOPSIS
Retrieves app-focused Microsoft Defender for Cloud Apps data.
SYNTAX
Get-XdrCloudAppsApp [[-Type] <String>] [-Metadata] [-CountOnly] [[-AppId] <String>] [[-StreamId] <String>]
[[-StreamName] <String>] [[-Timeframe] <Int32>] [[-Limit] <Int32>] [[-Skip] <Int32>] [[-SortField] <String>]
[[-SortDirection] <String>] [[-Filters] <Hashtable>] [-Raw] [-Force] [-ProgressAction <ActionPreference>]
[<CommonParameters>]
DESCRIPTION
Retrieves app catalog, discovered app, OAuth app permission, file, service, and tag data through one grouped command.
EXAMPLES
EXAMPLE 1
Get-XdrCloudAppsApp -Type Discovered -Limit 50
Retrieves discovered cloud apps.
EXAMPLE 2
Get-XdrCloudAppsApp -Type OAuth -Metadata
Retrieves OAuth app permission metadata.
PARAMETERS
-Type
App data surface to retrieve. Defaults to Discovered.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 1
Default value: Discovered
Accept pipeline input: False
Accept wildcard characters: False
-Metadata
Retrieves metadata for surfaces that expose filter or table metadata.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-CountOnly
Retrieves only a count for surfaces that expose count endpoints.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-AppId
App identifier used by app-specific data types.
Type: String
Parameter Sets: (All)
Aliases: _id, Id
Required: False
Position: 2
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
-StreamId
Discovery stream identifier for discovered app queries.
Type: String
Parameter Sets: (All)
Aliases: Stream
Required: False
Position: 3
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
-StreamName
Discovery stream display name pattern for discovered app queries.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 4
Default value: None
Accept pipeline input: False
Accept wildcard characters: True
-Timeframe
Discovery timeframe in days.
Type: Int32
Parameter Sets: (All)
Aliases:
Required: False
Position: 5
Default value: 30
Accept pipeline input: False
Accept wildcard characters: False
-Limit
Maximum number of records to request.
Type: Int32
Parameter Sets: (All)
Aliases:
Required: False
Position: 6
Default value: 100
Accept pipeline input: False
Accept wildcard characters: False
-Skip
Number of records to skip.
Type: Int32
Parameter Sets: (All)
Aliases:
Required: False
Position: 7
Default value: 0
Accept pipeline input: False
Accept wildcard characters: False
-SortField
Field used to sort grid results.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 8
Default value: Score
Accept pipeline input: False
Accept wildcard characters: False
-SortDirection
Sort direction for grid results.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 9
Default value: Desc
Accept pipeline input: False
Accept wildcard characters: False
-Filters
Cloud Apps filters to include in the query body.
Type: Hashtable
Parameter Sets: (All)
Aliases:
Required: False
Position: 10
Default value: @
Accept pipeline input: False
Accept wildcard characters: False
-Raw
Returns the API response shape instead of typed admin-friendly objects.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-Force
Bypasses cache-backed requests.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-ProgressAction
The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.
Type: ActionPreference
Parameter Sets: (All)
Aliases: proga
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.