← All XDRInternals commands

POWERSHELL COMMAND

Get-XdrVulnerabilityManagementBaseline

Retrieves security baseline assessment data from Microsoft Defender XDR.

View source ↗

Retrieves various security baseline profile information including compliance status, statistics, settings, and device data. Supports multiple endpoint variants for comprehensive baseline assessment. This function includes caching support with a 30-minute TTL to reduce API calls.

Syntax

Get-XdrVulnerabilityManagementBaseline [-ProfilesStatistics] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline [-ProfilesCompliance] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline [-TopFailingDevices] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline [-AllSettingsResults] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline [-AllSettingsFilters] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline [-AllSettingsStatistics] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline [-Profiles] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline [-ProfileFilters] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-OrgSettingsProfile] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileComplianceStatus] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileDevices] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileSettings] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileDetails] [-Top <int>] [-Force] [<CommonParameters>]

Get-XdrVulnerabilityManagementBaseline -ProfileId <string> [-ProfileStatistics] [-Top <int>] [-Force] [<CommonParameters>]

Parameters

-ProfilesStatistics

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves statistics for all baseline profiles.

-ProfilesCompliance

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves compliance data for all baseline profiles with pagination support.

-TopFailingDevices

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves the top devices failing baseline assessments.

-AllSettingsResults

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves results for all settings across all profiles with filtering and ordering.

-AllSettingsFilters

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves available filters for all settings queries.

-AllSettingsStatistics

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves statistical data for all settings.

-Profiles

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves a list of all baseline profiles.

-ProfileFilters

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves available filters for profile queries (from orgsettings).

-ProfileId

Property Value
Type String
Required Yes
Position named
Pipeline input No
Default Not documented

The GUID of a specific baseline profile to query. Required when using profile-specific switches.

-ProfileStatistics

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves statistics for a specific profile. Requires -ProfileId.

-ProfileDetails

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves detailed information for a specific profile. Requires -ProfileId.

-ProfileSettings

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves settings for a specific profile. Requires -ProfileId.

-ProfileDevices

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves devices associated with a specific profile. Requires -ProfileId.

-ProfileComplianceStatus

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves compliance status for a specific profile. Requires -ProfileId.

-OrgSettingsProfile

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Retrieves organization settings for a specific profile. Requires -ProfileId.

-Top

Property Value
Type Int32
Required No
Position named
Pipeline input No
Default 0

Limits the number of results returned for paginated endpoints. Useful for previewing data.

-Force

Property Value
Type SwitchParameter
Required No
Position named
Pipeline input No
Default False

Bypasses the cache and forces a fresh retrieval from the API.

Examples

Get-XdrVulnerabilityManagementBaseline -ProfilesStatistics
Retrieves statistics for all baseline profiles.
Get-XdrVulnerabilityManagementBaseline -Profiles
Retrieves a list of all baseline profiles.
Get-XdrVulnerabilityManagementBaseline -Profiles -Top 10
Retrieves the first 10 baseline profiles.
Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileDetails
Retrieves detailed information for a specific profile.
Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileStatistics
Retrieves statistics for a specific profile.
Get-XdrVulnerabilityManagementBaseline -ProfileId "e0ee318e-5f4a-4a41-a49f-d899b25759ba" -ProfileDevices
Retrieves all devices for a specific profile with automatic pagination.
Get-XdrVulnerabilityManagementBaseline -AllSettingsResults
Retrieves results for all settings with default filtering.
Get-XdrVulnerabilityManagementBaseline -TopFailingDevices
Retrieves the top devices failing baseline assessments.

Output

Type: System.Object[]

Returns an array of baseline data objects for paginated endpoints.

System.Management.Automation.PSCustomObject Returns a single object for non-paginated endpoints (statistics, details, filters).

View source