Get-ProtectionAlert

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Get-ProtectionAlert cmdlet to view alert policies in the Microsoft Purview compliance portal.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

Syntax

Get-ProtectionAlert
   [[-Identity] <ComplianceRuleIdParameter>]
   [-IncludeRuleXml]
   [<CommonParameters>]

Description

To use this cmdlet in Security & Compliance PowerShell, you need to be assigned permissions. For more information, see Permissions in the Microsoft Purview compliance portal.

Examples

Example 1

Get-ProtectionAlert | Format-List Name,Category,Comment,NotifyUser

This example returns a summary list of all alert policies.

Example 2

Get-ProtectionAlert -Identity "Malware campaign detected after delivery"

This example returns detailed information about the specified alert policy.

Parameters

-Identity

The Identity parameter specifies the alert policy that you want to view. You can use any value that uniquely identifies the alert policy. For example:

  • Name
  • Distinguished name (DN)
  • GUID
Type:ComplianceRuleIdParameter
Position:1
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False
Applies to:Security & Compliance

-IncludeRuleXml

{{ Fill IncludeRuleXml Description }}

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False
Applies to:Security & Compliance