Skip to main content

Get-XdrEndpointDeviceLiveResponseLibrary

SYNOPSIS

Retrieves the Live Response library files from Microsoft Defender XDR.

SYNTAX

Get-XdrEndpointDeviceLiveResponseLibrary [-Force] [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION

Gets the list of files available in the Live Response library. These files can be used with the 'putfile' and 'run' commands during Live Response sessions. Results are cached for 15 minutes.

EXAMPLES

EXAMPLE 1

Get-XdrEndpointDeviceLiveResponseLibrary
Lists all files in the Live Response library.

EXAMPLE 2

Get-XdrEndpointDeviceLiveResponseLibrary -Force
Forces a fresh retrieval of the library file list.

PARAMETERS

-Force

Bypasses the cache and forces a fresh retrieval from the API.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProgressAction

The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

Object

Returns the library file listing.

NOTES