XDRInternals

1.0.1

The unofficial API cmdlet to interact with the Microsoft Defender XDR portal

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name XDRInternals

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name XDRInternals

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) Nathan and Fabian. All rights reserved.

Package Details

Author(s)

  • Fabian Bader & Nathan McNulty

Tags

XDR Defender DefenderXDR MDE MDI DataLake Sentinel MDA MDO XDRInternals Community

Functions

Connect-XdrByEstsCookie ConvertTo-XdrEncodedAdvancedHuntingQuery Get-XdrActionsCenterHistory Get-XdrActionsCenterPending Get-XdrAdvancedHuntingFunction Get-XdrAdvancedHuntingTableSchema Get-XdrAdvancedHuntingUserHistory Get-XdrAlert Get-XdrConfigurationAlertServiceSetting Get-XdrConfigurationAlertTuning Get-XdrConfigurationAssetRuleManagement Get-XdrConfigurationCriticalAssetManagement Get-XdrConfigurationServiceAccountClassification Get-XdrConfigurationUnifiedRBACWorkload Get-XdrDatalakeDatabase Get-XdrDatalakeTableSchema Get-XdrEndpointAdvancedFeatures Get-XdrEndpointConfigurationAdvancedFeatures Get-XdrEndpointConfigurationAuthenticatedTelemetry Get-XdrEndpointConfigurationCustomCollectionRule Get-XdrEndpointConfigurationIntuneConnection Get-XdrEndpointConfigurationLiveResponse Get-XdrEndpointConfigurationPotentiallyUnwantedApplications Get-XdrEndpointConfigurationPreviewFeature Get-XdrEndpointConfigurationPurviewSharing Get-XdrEndpointDevice Get-XdrEndpointDeviceModel Get-XdrEndpointDeviceOsVersionFriendlyName Get-XdrEndpointDeviceRbacGroup Get-XdrEndpointDeviceRbacGroupScope Get-XdrEndpointDeviceTag Get-XdrEndpointDeviceTimeline Get-XdrEndpointDeviceTotals Get-XdrEndpointDeviceVendor Get-XdrEndpointDeviceWindowsReleaseVersion Get-XdrEndpointLicenseReport Get-XdrIdentityAlertThreshold Get-XdrIdentityConfigurationDirectoryServiceAccount Get-XdrIdentityConfigurationRemediationActionAccount Get-XdrIdentityDomainControllerCoverage Get-XdrIdentityIdentity Get-XdrIdentityOnboardingStatus Get-XdrIdentityServiceAccount Get-XdrIdentityStatistic Get-XdrIncident Get-XdrIncidentAssociatedAlert Get-XdrStreamingApiConfiguration Get-XdrSuppressionRule Get-XdrTenantContext Get-XdrTenants Get-XdrTenantWorkloadStatus Get-XdrXspmAttackPath Get-XdrXspmChokePoint Get-XdrXspmTopEntryPoint Get-XdrXspmTopTarget Invoke-XdrHuntingQueryValidation Invoke-XdrRestMethod Invoke-XdrXspmHuntingQuery Merge-XdrIncident Move-XdrAlertToIncident New-XdrAdvancedHuntingFunction New-XdrEndpointConfigurationCustomCollectionRule New-XdrEndpointDeviceRbacGroup New-XdrIdentityConfigurationRemediationActionAccount Remove-XdrAdvancedHuntingFunction Remove-XdrIdentityConfigurationRemediationActionAccount Set-XdrAdvancedHuntingFunction Set-XdrConnectionSettings Set-XdrEndpointAdvancedFeatures Set-XdrEndpointConfigurationCustomCollectionRule Set-XdrEndpointDeviceRbacGroup Set-XdrIdentityConfigurationRemediationActionAccount Update-XdrConnectionSettings

Dependencies

This module has no dependencies.

FileList

Version History

Version Downloads Last updated
1.0.1 (current version) 4 12/10/2025
1.0.0 6 12/10/2025
0.0.1 5 11/27/2025