Skip to content

Commit 7dc790d

Browse files
chrisdachrisda
authored
Merge pull request MicrosoftDocs#9084 from MicrosoftDocs/ContMal-chrisda
ContMal-chrisda to Main
2 parents 03810b9 + 4310855 commit 7dc790d

6 files changed

+380
-0
lines changed

‎exchange/exchange-ps/exchange/Get-AdvancedThreatProtectionDocumentDetail.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,8 @@ ms.reviewer:
1414
## SYNOPSIS
1515
This cmdlet is available only in the cloud-based service.
1616

17+
**Note**: This cmdlet will be deprecated. Use the [Get-ContentMalwareMdoDetailReport](https://docs.microsoft.com/powershell/module/exchange/get-contentmalwaremdodetailreport) cmdlet instead.
18+
1719
Use the Get-AdvancedThreatProtectionDocumentDetailReport cmdlet to view the detailed results of Safe Attachments for SharePoint, OneDrive, and Microsoft Teams in your Microsoft Defender for Office 365 organization.
1820

1921
**Note**: We recommend that you use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell. For instructions, see [Connect to Exchange Online PowerShell](https://docs.microsoft.com/powershell/exchange/connect-to-exchange-online-powershell).

‎exchange/exchange-ps/exchange/Get-AdvancedThreatProtectionDocumentReport.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,8 @@ ms.reviewer:
1414
## SYNOPSIS
1515
This cmdlet is available only in the cloud-based service.
1616

17+
**Note**: This cmdlet will be deprecated. Use the [Get-ContentMalwareMdoAggregateReport](https://docs.microsoft.com/powershell/module/exchange/get-contentmalwaremdoaggregatereport) cmdlet instead.
18+
1719
Use the Get-AdvancedThreatProtectionDocumentReport cmdlet to view the results of Safe Attachments for SharePoint, OneDrive, and Microsoft Teams in your Microsoft Defender for Office 365 organization.
1820

1921
**Note**: We recommend that you use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell. For instructions, see [Connect to Exchange Online PowerShell](https://docs.microsoft.com/powershell/exchange/connect-to-exchange-online-powershell).

‎exchange/exchange-ps/exchange/Get-ContentMalwareMdoAggregateReport.md

Lines changed: 184 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,184 @@
1+
---
2+
external help file: Microsoft.Exchange.ServerStatus-Help.xml
3+
online version: https://docs.microsoft.com/powershell/module/exchange/get-contentmalwaremdoaggregatereport
4+
applicable: Exchange Online, Exchange Online Protection
5+
title: Get-ContentMalwareMdoAggregateReport
6+
schema: 2.0.0
7+
author: chrisda
8+
ms.author: chrisda
9+
ms.reviewer:
10+
---
11+
12+
# Get-ContentMalwareMdoAggregateReport
13+
14+
## SYNOPSIS
15+
This cmdlet is available only in the cloud-based service.
16+
17+
Use the Get-ContentMalwareMdoAggregateReport cmdlet to view a summary detections by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams in Microsoft Defender for Office 365.
18+
19+
**Note**: We recommend that you use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell. For instructions, see [Connect to Exchange Online PowerShell](https://docs.microsoft.com/powershell/exchange/connect-to-exchange-online-powershell).
20+
21+
For information about the parameter sets in the Syntax section below, see [Exchange cmdlet syntax](https://docs.microsoft.com/powershell/exchange/exchange-cmdlet-syntax).
22+
23+
## SYNTAX
24+
25+
```
26+
Get-ContentMalwareMdoAggregateReport
27+
[-DetectionTechnology <MultiValuedProperty>]
28+
[-EndDate <System.DateTime>]
29+
[-Page <Int32>]
30+
[-PageSize <Int32>]
31+
[-StartDate <System.DateTime>]
32+
[-Workload <MultiValuedProperty>]
33+
[<CommonParameters>]
34+
```
35+
36+
## DESCRIPTION
37+
For the specified reporting period, the cmdlet returns the following information:
38+
39+
- Date
40+
- Detection Technology
41+
- Workload
42+
- Count
43+
44+
By default, the command returns data for the last 14 days. Data for the last 90 days is available.
45+
46+
You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see [Find the permissions required to run any Exchange cmdlet](https://docs.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).
47+
48+
## EXAMPLES
49+
50+
### Example 1
51+
```powershell
52+
Get-ContentMalwareMdoAggregateReport -StartDate 1/1/2022 -EndDate 1/4/2022 -Workload OneDriveForBusiness
53+
```
54+
55+
This example returns the results for OneDrive detections for the specified date range.
56+
57+
## PARAMETERS
58+
59+
### -DetectionTechnology
60+
The DetectionTechnology parameter filters the results by what classified the file as malware. Valid values are:
61+
62+
- AntiMalware
63+
- AtpSafeAttachment
64+
- Reputation
65+
66+
You can specify multiple values separated by commas.
67+
68+
```yaml
69+
Type: MultiValuedProperty
70+
Parameter Sets: (All)
71+
Aliases:
72+
Applicable: Exchange Online, Exchange Online Protection
73+
74+
Required: False
75+
Position: Named
76+
Default value: None
77+
Accept pipeline input: True (ByPropertyName, ByValue)
78+
Accept wildcard characters: False
79+
```
80+
81+
### -EndDate
82+
The EndDate parameter specifies the end date of the date range.
83+
84+
Use the short date format that's defined in the Regional Options settings on the computer where you're running the command. For example, if the computer is configured to use the short date format mm/dd/yyyy, enter 09/01/2021 to specify September 1, 2021.
85+
86+
```yaml
87+
Type: System.DateTime
88+
Parameter Sets: (All)
89+
Aliases:
90+
Applicable: Exchange Online, Exchange Online Protection
91+
92+
Required: False
93+
Position: Named
94+
Default value: None
95+
Accept pipeline input: False
96+
Accept wildcard characters: False
97+
```
98+
99+
### -Page
100+
The Page parameter specifies the page number of the results you want to view. Valid input for this parameter is an integer between 1 and 1000. The default value is 1.
101+
102+
```yaml
103+
Type: Int32
104+
Parameter Sets: (All)
105+
Aliases:
106+
Applicable: Exchange Online, Exchange Online Protection
107+
108+
Required: False
109+
Position: Named
110+
Default value: None
111+
Accept pipeline input: False
112+
Accept wildcard characters: False
113+
```
114+
115+
### -PageSize
116+
The PageSize parameter specifies the maximum number of entries per page. Valid input for this parameter is an integer between 1 and 5000. The default value is 1000.
117+
118+
```yaml
119+
Type: Int32
120+
Parameter Sets: (All)
121+
Aliases:
122+
Applicable: Exchange Online, Exchange Online Protection
123+
124+
Required: False
125+
Position: Named
126+
Default value: None
127+
Accept pipeline input: False
128+
Accept wildcard characters: False
129+
```
130+
131+
### -StartDate
132+
The EndDate parameter specifies the start date of the date range.
133+
134+
Use the short date format that's defined in the Regional Options settings on the computer where you're running the command. For example, if the computer is configured to use the short date format mm/dd/yyyy, enter 09/01/2021 to specify September 1, 2021.
135+
136+
```yaml
137+
Type: System.DateTime
138+
Parameter Sets: (All)
139+
Aliases:
140+
Applicable: Exchange Online, Exchange Online Protection
141+
142+
Required: False
143+
Position: Named
144+
Default value: None
145+
Accept pipeline input: False
146+
Accept wildcard characters: False
147+
```
148+
149+
### -Workload
150+
The Workload parameter filters the results by where the detected file is located. Valid values are:
151+
152+
- OneDriveForBusiness
153+
- SharePoint
154+
- Teams
155+
156+
You can specify multiple values separated by commas.
157+
158+
```yaml
159+
Type: MultiValuedProperty
160+
Parameter Sets: (All)
161+
Aliases:
162+
Applicable: Exchange Online, Exchange Online Protection
163+
164+
Required: False
165+
Position: Named
166+
Default value: None
167+
Accept pipeline input: True (ByPropertyName, ByValue)
168+
Accept wildcard characters: False
169+
```
170+
171+
### CommonParameters
172+
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](https://go.microsoft.com/fwlink/p/?LinkID=113216).
173+
174+
## INPUTS
175+
176+
###
177+
178+
## OUTPUTS
179+
180+
###
181+
182+
## NOTES
183+
184+
## RELATED LINKS

‎exchange/exchange-ps/exchange/Get-ContentMalwareMdoDetailReport.md

Lines changed: 186 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,186 @@
1+
---
2+
external help file: Microsoft.Exchange.ServerStatus-Help.xml
3+
online version: https://docs.microsoft.com/powershell/module/exchange/get-contentmalwaremdodetailreport
4+
applicable: Exchange Online, Exchange Online Protection
5+
title: Get-ContentMalwareMdoDetailReport
6+
schema: 2.0.0
7+
author: chrisda
8+
ms.author: chrisda
9+
ms.reviewer:
10+
---
11+
12+
# Get-ContentMalwareMdoDetailReport
13+
14+
## SYNOPSIS
15+
This cmdlet is available only in the cloud-based service.
16+
17+
Use the ContentMalwareMdoDetailReport cmdlet to view detection details by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams in Microsoft Defender for Office 365.
18+
19+
**Note**: We recommend that you use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell. For instructions, see [Connect to Exchange Online PowerShell](https://docs.microsoft.com/powershell/exchange/connect-to-exchange-online-powershell).
20+
21+
For information about the parameter sets in the Syntax section below, see [Exchange cmdlet syntax](https://docs.microsoft.com/powershell/exchange/exchange-cmdlet-syntax).
22+
23+
## SYNTAX
24+
25+
```
26+
Get-ContentMalwareMdoDetailReport
27+
[-DetectionTechnology <MultiValuedProperty>]
28+
[-EndDate <System.DateTime>]
29+
[-Page <Int32>]
30+
[-PageSize <Int32>]
31+
[-StartDate <System.DateTime>]
32+
[-Workload <MultiValuedProperty>]
33+
[<CommonParameters>]
34+
```
35+
36+
## DESCRIPTION
37+
For the specified reporting period, the cmdlet returns the following information:
38+
39+
- Date
40+
- File Name
41+
- Workload
42+
- Detection Technology
43+
- File Size
44+
- Last modifying user
45+
46+
By default, the command returns data for the last 14 days. Data for the last 30 days is available.
47+
48+
You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see [Find the permissions required to run any Exchange cmdlet](https://docs.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).
49+
50+
## EXAMPLES
51+
52+
### Example 1
53+
```powershell
54+
Get-ContentMalwareMdoDetailReport -StartDate 1/1/2022 -EndDate 1/4/2022 -DetectionTechnology AtpSafeAttachment
55+
```
56+
57+
This example returns the results for detections by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams for the specified date range.
58+
59+
## PARAMETERS
60+
61+
### -DetectionTechnology
62+
The DetectionTechnology parameter filters the results by what classified the file as malware. Valid values are:
63+
64+
- AntiMalware
65+
- AtpSafeAttachment
66+
- Reputation
67+
68+
You can specify multiple values separated by commas.
69+
70+
```yaml
71+
Type: MultiValuedProperty
72+
Parameter Sets: (All)
73+
Aliases:
74+
Applicable: Exchange Online, Exchange Online Protection
75+
76+
Required: False
77+
Position: Named
78+
Default value: None
79+
Accept pipeline input: True (ByPropertyName, ByValue)
80+
Accept wildcard characters: False
81+
```
82+
83+
### -EndDate
84+
The EndDate parameter specifies the end date of the date range.
85+
86+
Use the short date format that's defined in the Regional Options settings on the computer where you're running the command. For example, if the computer is configured to use the short date format mm/dd/yyyy, enter 09/01/2021 to specify September 1, 2021.
87+
88+
```yaml
89+
Type: System.DateTime
90+
Parameter Sets: (All)
91+
Aliases:
92+
Applicable: Exchange Online, Exchange Online Protection
93+
94+
Required: False
95+
Position: Named
96+
Default value: None
97+
Accept pipeline input: False
98+
Accept wildcard characters: False
99+
```
100+
101+
### -Page
102+
The Page parameter specifies the page number of the results you want to view. Valid input for this parameter is an integer between 1 and 1000. The default value is 1.
103+
104+
```yaml
105+
Type: Int32
106+
Parameter Sets: (All)
107+
Aliases:
108+
Applicable: Exchange Online, Exchange Online Protection
109+
110+
Required: False
111+
Position: Named
112+
Default value: None
113+
Accept pipeline input: False
114+
Accept wildcard characters: False
115+
```
116+
117+
### -PageSize
118+
The PageSize parameter specifies the maximum number of entries per page. Valid input for this parameter is an integer between 1 and 5000. The default value is 1000.
119+
120+
```yaml
121+
Type: Int32
122+
Parameter Sets: (All)
123+
Aliases:
124+
Applicable: Exchange Online, Exchange Online Protection
125+
126+
Required: False
127+
Position: Named
128+
Default value: None
129+
Accept pipeline input: False
130+
Accept wildcard characters: False
131+
```
132+
133+
### -StartDate
134+
The EndDate parameter specifies the start date of the date range.
135+
136+
Use the short date format that's defined in the Regional Options settings on the computer where you're running the command. For example, if the computer is configured to use the short date format mm/dd/yyyy, enter 09/01/2021 to specify September 1, 2021.
137+
138+
```yaml
139+
Type: System.DateTime
140+
Parameter Sets: (All)
141+
Aliases:
142+
Applicable: Exchange Online, Exchange Online Protection
143+
144+
Required: False
145+
Position: Named
146+
Default value: None
147+
Accept pipeline input: False
148+
Accept wildcard characters: False
149+
```
150+
151+
### -Workload
152+
The Workload parameter filters the results by where the detected file is located. Valid values are:
153+
154+
- OneDriveForBusiness
155+
- SharePoint
156+
- Teams
157+
158+
You can specify multiple values separated by commas.
159+
160+
```yaml
161+
Type: MultiValuedProperty
162+
Parameter Sets: (All)
163+
Aliases:
164+
Applicable: Exchange Online, Exchange Online Protection
165+
166+
Required: False
167+
Position: Named
168+
Default value: None
169+
Accept pipeline input: True (ByPropertyName, ByValue)
170+
Accept wildcard characters: False
171+
```
172+
173+
### CommonParameters
174+
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](https://go.microsoft.com/fwlink/p/?LinkID=113216).
175+
176+
## INPUTS
177+
178+
###
179+
180+
## OUTPUTS
181+
182+
###
183+
184+
## NOTES
185+
186+
## RELATED LINKS

0 commit comments

Comments
 (0)