Skip to content

Commit 7ed4826

Browse files
cuixi1222peombwa
andauthored
Update Get-MgRiskDetection.md (#1381)
* Update Get-MgRiskDetection.md Add more examples for Identity protection PowerShell cmdlet Get-Mgriskdetection * Update Get-MgRiskDetection.md fix the filter for example 2 * Update Get-MgRiskDetection.md Fix casing of Get-MgRiskDetection commands include spaces between commands and comma Co-authored-by: Peter Ombwa <[email protected]>
1 parent d942c64 commit 7ed4826

File tree

1 file changed

+51
-8
lines changed

1 file changed

+51
-8
lines changed
Lines changed: 51 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,61 @@
1-
### Example 1: {{ Add title here }}
1+
### Example 1: Get all riskDetections
22
```powershell
3-
PS C:\> {{ Add code here }}
3+
Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All"
4+
Get-MgRiskDetection -All | Format-Table UserDisplayName, RiskType, RiskLevel, DetectedDateTime
45
5-
{{ Add output here }}
6+
UserDisplayName RiskType RiskLevel DetectedDateTime
7+
--------------- -------- --------- ----------------
8+
Jason Mayer anonymizedIPAddress medium 4/19/2022 10:44:40 PM
9+
Jason Mayer generic medium 4/20/2022 1:16:29 PM
10+
Jason Mayer anonymizedIPAddress high 4/21/2022 9:50:28 PM
11+
Jason Mayer unfamiliarFeatures high 4/21/2022 10:07:33 PM
12+
Jason Mayer unlikelyTravel medium 4/21/2022 10:42:04 PM
13+
Jason Mayer generic medium 4/23/2022 12:52:20 PM
14+
Alice Su unfamiliarFeatures low 5/2/2022 12:01:44 AM
15+
Alice Su unlikelyTravel low 5/2/2022 2:16:22 AM
616
```
717

8-
{{ Add description here }}
18+
This command returns a list of all users.
919

10-
### Example 2: {{ Add title here }}
20+
### Example 2: Get riskDetections by user displayname
1121
```powershell
12-
PS C:\> {{ Add code here }}
22+
Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All"
23+
Get-MgRiskDetection -Filter "UserDisplayname eq 'Jason Mayer'" | Format-Table UserDisplayName, RiskType, RiskLevel, DetectedDateTime
1324
14-
{{ Add output here }}
25+
UserDisplayName RiskType RiskLevel DetectedDateTime
26+
--------------- -------- --------- ----------------
27+
Jason Mayer anonymizedIPAddress medium 4/19/2022 10:44:40 PM
28+
Jason Mayer generic medium 4/20/2022 1:16:29 PM
29+
Jason Mayer anonymizedIPAddress high 4/21/2022 9:50:28 PM
30+
Jason Mayer unfamiliarFeatures high 4/21/2022 10:07:33 PM
31+
Jason Mayer unlikelyTravel medium 4/21/2022 10:42:04 PM
32+
Jason Mayer generic medium 4/23/2022 12:52:20 PM
1533
```
1634

17-
{{ Add description here }}
35+
This command returns all risk detections for the specified user
1836

37+
### Example 3: Get riskDetections by risk type
38+
```powershell
39+
Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All"
40+
Get-MgRiskDetection -Filter "RiskType eq 'anonymizedIPAddress'" | Format-Table UserDisplayName, RiskType, RiskLevel, DetectedDateTime
41+
42+
UserDisplayName RiskType RiskLevel DetectedDateTime
43+
--------------- -------- --------- ----------------
44+
Jason Mayer anonymizedIPAddress high 4/21/2022 9:50:28 PM
45+
Jason Mayer anonymizedIPAddress medium 4/19/2022 10:44:40 PM
46+
Alex Su anonymizedIPAddress high 6/9/2022 4:31:19 AM
47+
```
48+
49+
This command returns all risk detections for the anonymizedIPAddress risk detection
50+
51+
### Example 4: Get all riskDetections for a particular user with high risk
52+
```powershell
53+
Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All"
54+
Get-MgRiskDetection -Filter "UserDisplayName eq 'Jason Mayer' and Risklevel eq 'high'" | Format-Table UserDisplayName, RiskType, RiskLevel, DetectedDateTime
55+
56+
UserDisplayName RiskType RiskLevel DetectedDateTime
57+
--------------- -------- --------- ----------------
58+
Jason Mayer anonymizedIPAddress high 4/21/2022 9:50:28 PM
59+
Jason Mayer unfamiliarFeatures high 4/21/2022 10:07:33 PM
60+
```
61+
This command returns all risk detections with high risks for the specified user

0 commit comments

Comments
 (0)