Skip to main content

Get-XdrVulnerabilityManagementBaseline

SYNOPSIS

Retrieves security baseline assessment data from Microsoft Defender XDR.

SYNTAX

ProfilesStatistics (Default)

Get-XdrVulnerabilityManagementBaseline [-ProfilesStatistics] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

ProfilesCompliance

Get-XdrVulnerabilityManagementBaseline [-ProfilesCompliance] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

TopFailingDevices

Get-XdrVulnerabilityManagementBaseline [-TopFailingDevices] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

AllSettingsResults

Get-XdrVulnerabilityManagementBaseline [-AllSettingsResults] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

AllSettingsFilters

Get-XdrVulnerabilityManagementBaseline [-AllSettingsFilters] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

AllSettingsStatistics

Get-XdrVulnerabilityManagementBaseline [-AllSettingsStatistics] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

Profiles

Get-XdrVulnerabilityManagementBaseline [-Profiles] [-Top <Int32>] [-Force] [-ProgressAction <ActionPreference>]
[<CommonParameters>]

ProfileFilters

Get-XdrVulnerabilityManagementBaseline [-ProfileFilters] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

OrgSettingsProfile

Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-OrgSettingsProfile] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

ProfileComplianceStatus

Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileComplianceStatus] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

ProfileDevices

Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileDevices] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

ProfileSettings

Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileSettings] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

ProfileDetails

Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileDetails] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

ProfileStatistics

Get-XdrVulnerabilityManagementBaseline -ProfileId <String> [-ProfileStatistics] [-Top <Int32>] [-Force]
[-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION

Retrieves various security baseline profile information including compliance status, statistics, settings, and device data. Supports multiple endpoint variants for comprehensive baseline assessment. This function includes caching support with a 30-minute TTL to reduce API calls.

EXAMPLES

EXAMPLE 1

Get-XdrVulnerabilityManagementBaseline -ProfilesStatistics
Retrieves statistics for all baseline profiles.

EXAMPLE 2

Get-XdrVulnerabilityManagementBaseline -Profiles
Retrieves a list of all baseline profiles.

EXAMPLE 3

Get-XdrVulnerabilityManagementBaseline -Profiles -Top 10
Retrieves the first 10 baseline profiles.

EXAMPLE 4

Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileDetails
Retrieves detailed information for a specific profile.

EXAMPLE 5

Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileStatistics
Retrieves statistics for a specific profile.

EXAMPLE 6

Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileDevices
Retrieves all devices for a specific profile with automatic pagination.

EXAMPLE 7

Get-XdrVulnerabilityManagementBaseline -AllSettingsResults
Retrieves results for all settings with default filtering.

EXAMPLE 8

Get-XdrVulnerabilityManagementBaseline -TopFailingDevices
Retrieves the top devices failing baseline assessments.

PARAMETERS

-ProfilesStatistics

Retrieves statistics for all baseline profiles.

Type: SwitchParameter
Parameter Sets: ProfilesStatistics
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProfilesCompliance

Retrieves compliance data for all baseline profiles with pagination support.

Type: SwitchParameter
Parameter Sets: ProfilesCompliance
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-TopFailingDevices

Retrieves the top devices failing baseline assessments.

Type: SwitchParameter
Parameter Sets: TopFailingDevices
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-AllSettingsResults

Retrieves results for all settings across all profiles with filtering and ordering.

Type: SwitchParameter
Parameter Sets: AllSettingsResults
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-AllSettingsFilters

Retrieves available filters for all settings queries.

Type: SwitchParameter
Parameter Sets: AllSettingsFilters
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-AllSettingsStatistics

Retrieves statistical data for all settings.

Type: SwitchParameter
Parameter Sets: AllSettingsStatistics
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-Profiles

Retrieves a list of all baseline profiles.

Type: SwitchParameter
Parameter Sets: Profiles
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProfileFilters

Retrieves available filters for profile queries (from orgsettings).

Type: SwitchParameter
Parameter Sets: ProfileFilters
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProfileId

The GUID of a specific baseline profile to query. Required when using profile-specific switches.

Type: String
Parameter Sets: OrgSettingsProfile, ProfileComplianceStatus, ProfileDevices, ProfileSettings, ProfileDetails, ProfileStatistics
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ProfileStatistics

Retrieves statistics for a specific profile. Requires -ProfileId.

Type: SwitchParameter
Parameter Sets: ProfileStatistics
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProfileDetails

Retrieves detailed information for a specific profile. Requires -ProfileId.

Type: SwitchParameter
Parameter Sets: ProfileDetails
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProfileSettings

Retrieves settings for a specific profile. Requires -ProfileId.

Type: SwitchParameter
Parameter Sets: ProfileSettings
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProfileDevices

Retrieves devices associated with a specific profile. Requires -ProfileId.

Type: SwitchParameter
Parameter Sets: ProfileDevices
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProfileComplianceStatus

Retrieves compliance status for a specific profile. Requires -ProfileId.

Type: SwitchParameter
Parameter Sets: ProfileComplianceStatus
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-OrgSettingsProfile

Retrieves organization settings for a specific profile. Requires -ProfileId.

Type: SwitchParameter
Parameter Sets: OrgSettingsProfile
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-Top

Limits the number of results returned for paginated endpoints. Useful for previewing data.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: 0
Accept pipeline input: False
Accept wildcard characters: False

-Force

Bypasses the cache and forces a fresh retrieval from the API.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProgressAction

The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

System.Object[]

Returns an array of baseline data objects for paginated endpoints.

System.Management.Automation.PSCustomObject

Returns a single object for non-paginated endpoints (statistics, details, filters).

NOTES