How to export reports from Microsoft 365 defender which are highlighted in below screenshots via PowerShell or any other way for the same?

Vinod Survase 4,781 Reputation points
2023-03-23T13:47:15.56+00:00

How to export reports from Microsoft 365 defender which are highlighted in below screenshots via PowerShell or any other way for the same?

See below screenshot for reference.

User's image

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Andrew Blumhardt 10,051 Reputation points Microsoft Employee
    2023-03-23T14:16:43.4266667+00:00

    There isn't a good way to my knowledge to interact with these reports directly. As you can imagine, these reports are querying the stored data. Most, if not all, of that data is in the advanced hunting logs. You could try to create something similar by querying the data by the API. If the AH logs are sent to Sentinel, you may find it easier to recreate these reports as workbooks.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.