Skip to main content

Get-XdrVulnerabilityManagementAdvisories

SYNOPSIS

Retrieves security advisories from Vulnerability Management.

SYNTAX

Default (Default)

Get-XdrVulnerabilityManagementAdvisories [-Force] [-Top <Int32>] [-ProgressAction <ActionPreference>]
[<CommonParameters>]

CountOnly

Get-XdrVulnerabilityManagementAdvisories [-Force] [-CountOnly] [-Top <Int32>]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

ByVendor

Get-XdrVulnerabilityManagementAdvisories [-Force] [-Top <Int32>] [-ByVendor]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION

Gets security advisories from Threat and Vulnerability Management (TVM) in Microsoft Defender XDR. This function includes caching support with a 30-minute TTL to reduce API calls. By default, returns all pages of results with pagination handled automatically.

EXAMPLES

EXAMPLE 1

Get-XdrVulnerabilityManagementAdvisories
Retrieves all security advisories with full pagination.

EXAMPLE 2

Get-XdrVulnerabilityManagementAdvisories -Force
Forces a fresh retrieval of security advisories, bypassing the cache.

EXAMPLE 3

Get-XdrVulnerabilityManagementAdvisories -CountOnly
Returns only the total number of advisories.

EXAMPLE 4

Get-XdrVulnerabilityManagementAdvisories -Top 10
Returns only the first 10 advisories.

EXAMPLE 5

Get-XdrVulnerabilityManagementAdvisories -ByVendor
Returns only the vendor-specific advisory counts (Dell, HP, Lenovo).

PARAMETERS

-Force

Bypasses the cache and forces a fresh retrieval from the API.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-CountOnly

Returns only the total count of advisories (numOfResults).

Type: SwitchParameter
Parameter Sets: CountOnly
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-Top

Limits the number of results returned. Useful for previewing data without fetching all pages.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: 0
Accept pipeline input: False
Accept wildcard characters: False

-ByVendor

Returns only the vendor-specific advisory counts (meta object).

Type: SwitchParameter
Parameter Sets: ByVendor
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProgressAction

The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

System.Object[]

Returns an array of advisory objects when using default or -Top parameters.

System.Int64

When -CountOnly is specified, returns the total count as an integer.

System.Management.Automation.PSCustomObject

When -ByVendor is specified, returns the vendor metadata object.

NOTES