Get-ProtectionAlert

Reference

Module:: ExchangePowerShell

Applies to:: Security & Compliance

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Get-ProtectionAlert cmdlet to view alert policies in the Microsoft Purview compliance portal.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

Syntax

Get-ProtectionAlert
   [[-Identity] <ComplianceRuleIdParameter>]
   [-IncludeRuleXml]
   [<CommonParameters>]

Description

To use this cmdlet in Security & Compliance PowerShell, you need to be assigned permissions. For more information, see Permissions in the Microsoft Purview compliance portal.

Examples

Example 1

Get-ProtectionAlert | Format-List Name,Category,Comment,NotifyUser

This example returns a summary list of all alert policies.

Example 2

Get-ProtectionAlert -Identity "Malware campaign detected after delivery"

This example returns detailed information about the specified alert policy.

Parameters

-Identity

The Identity parameter specifies the alert policy that you want to view. You can use any value that uniquely identifies the alert policy. For example:

Name
Distinguished name (DN)
GUID

Type:	ComplianceRuleIdParameter
Position:	1
Default value:	None
Required:	False
Accept pipeline input:	True
Accept wildcard characters:	False
Applies to:	Security & Compliance

-IncludeRuleXml

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False
Applies to:	Security & Compliance

Jaa