POWERSHELL COMMAND
Get-XdrVulnerabilityManagementBaseline
Retrieves security baseline assessment data from Microsoft Defender XDR.
Retrieves various security baseline profile information including compliance status, statistics, settings, and device data. Supports multiple endpoint variants for comprehensive baseline assessment. This function includes caching support with a 30-minute TTL to reduce API calls.
Syntax
Get-XdrVulnerabilityManagementBaseline [-ProfilesStatistics] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline [-ProfilesCompliance] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline [-TopFailingDevices] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline [-AllSettingsResults] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline [-AllSettingsFilters] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline [-AllSettingsStatistics] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline [-Profiles] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline [-ProfileFilters] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-OrgSettingsProfile] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileComplianceStatus] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileDevices] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileSettings] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileDetails] [-Top <int>] [-Force] [<CommonParameters>]
Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileStatistics] [-Top <int>] [-Force] [<CommonParameters>]
Parameters
-ProfilesStatistics
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves statistics for all baseline profiles.
-ProfilesCompliance
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves compliance data for all baseline profiles with pagination support.
-TopFailingDevices
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves the top devices failing baseline assessments.
-AllSettingsResults
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves results for all settings across all profiles with filtering and ordering.
-AllSettingsFilters
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves available filters for all settings queries.
-AllSettingsStatistics
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves statistical data for all settings.
-Profiles
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves a list of all baseline profiles.
-ProfileFilters
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves available filters for profile queries (from orgsettings).
-ProfileId
| Property | Value |
|---|---|
| Type | String |
| Required | Yes |
| Position | named |
| Pipeline input | No |
| Default | Not documented |
The GUID of a specific baseline profile to query. Required when using profile-specific switches.
-ProfileStatistics
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves statistics for a specific profile. Requires -ProfileId.
-ProfileDetails
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves detailed information for a specific profile. Requires -ProfileId.
-ProfileSettings
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves settings for a specific profile. Requires -ProfileId.
-ProfileDevices
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves devices associated with a specific profile. Requires -ProfileId.
-ProfileComplianceStatus
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves compliance status for a specific profile. Requires -ProfileId.
-OrgSettingsProfile
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Retrieves organization settings for a specific profile. Requires -ProfileId.
-Top
| Property | Value |
|---|---|
| Type | Int32 |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | 0 |
Limits the number of results returned for paginated endpoints. Useful for previewing data.
-Force
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Bypasses the cache and forces a fresh retrieval from the API.
Examples
Get-XdrVulnerabilityManagementBaseline -ProfilesStatistics
Retrieves statistics for all baseline profiles.
Get-XdrVulnerabilityManagementBaseline -Profiles
Retrieves a list of all baseline profiles.
Get-XdrVulnerabilityManagementBaseline -Profiles -Top 10
Retrieves the first 10 baseline profiles.
Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileDetails
Retrieves detailed information for a specific profile.
Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileStatistics
Retrieves statistics for a specific profile.
Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileDevices
Retrieves all devices for a specific profile with automatic pagination.
Get-XdrVulnerabilityManagementBaseline -AllSettingsResults
Retrieves results for all settings with default filtering.
Get-XdrVulnerabilityManagementBaseline -TopFailingDevices
Retrieves the top devices failing baseline assessments.
Output
Type: System.Object[]
Returns an array of baseline data objects for paginated endpoints.
System.Management.Automation.PSCustomObject Returns a single object for non-paginated endpoints (statistics, details, filters).