Share via

How to export reports from Microsoft 365 defender which are highlighted in below screenshots via PowerShell or any other way for the same?

Vinod Survase 4,736 Reputation points
2023-03-23T13:47:15.56+00:00

How to export reports from Microsoft 365 defender which are highlighted in below screenshots via PowerShell or any other way for the same?

See below screenshot for reference.

User's image

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,348 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
192 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andrew Blumhardt 9,856 Reputation points Microsoft Employee
    2023-03-23T14:16:43.4266667+00:00

    There isn't a good way to my knowledge to interact with these reports directly. As you can imagine, these reports are querying the stored data. Most, if not all, of that data is in the advanced hunting logs. You could try to create something similar by querying the data by the API. If the AH logs are sent to Sentinel, you may find it easier to recreate these reports as workbooks.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.