From 26786d5994debf89a5f7b71852422879f734e8c4 Mon Sep 17 00:00:00 2001 From: Tracy YU Date: Mon, 11 Jul 2022 16:11:27 +1000 Subject: [PATCH 1/3] Update Get-MgRiskDetection.md Add more examples for Identity protection PowerShell cmdlet Get-Mgriskdetection --- .../examples/v1.0-beta/Get-MgRiskDetection.md | 59 ++++++++++++++++--- 1 file changed, 51 insertions(+), 8 deletions(-) diff --git a/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md b/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md index 093355d11d5..476cf53486f 100644 --- a/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md +++ b/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md @@ -1,18 +1,61 @@ -### Example 1: {{ Add title here }} +### Example 1: Get all riskDetections ```powershell -PS C:\> {{ Add code here }} +Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All" +Get-Mgriskdetection -All|Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime -{{ Add output here }} +UserDisplayName RiskType RiskLevel DetectedDateTime +--------------- -------- --------- ---------------- +Jason Mayer anonymizedIPAddress medium 4/19/2022 10:44:40 PM +Jason Mayer generic medium 4/20/2022 1:16:29 PM +Jason Mayer anonymizedIPAddress high 4/21/2022 9:50:28 PM +Jason Mayer unfamiliarFeatures high 4/21/2022 10:07:33 PM +Jason Mayer unlikelyTravel medium 4/21/2022 10:42:04 PM +Jason Mayer generic medium 4/23/2022 12:52:20 PM +Alice Su unfamiliarFeatures low 5/2/2022 12:01:44 AM +Alice Su unlikelyTravel low 5/2/2022 2:16:22 AM ``` -{{ Add description here }} +This command returns a list of all users. -### Example 2: {{ Add title here }} +### Example 2: Get riskDetections by user displayname ```powershell -PS C:\> {{ Add code here }} +Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All" +Get-Mgriskdetection -All|Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime -{{ Add output here }} +UserDisplayName RiskType RiskLevel DetectedDateTime +--------------- -------- --------- ---------------- +Jason Mayer anonymizedIPAddress medium 4/19/2022 10:44:40 PM +Jason Mayer generic medium 4/20/2022 1:16:29 PM +Jason Mayer anonymizedIPAddress high 4/21/2022 9:50:28 PM +Jason Mayer unfamiliarFeatures high 4/21/2022 10:07:33 PM +Jason Mayer unlikelyTravel medium 4/21/2022 10:42:04 PM +Jason Mayer generic medium 4/23/2022 12:52:20 PM ``` -{{ Add description here }} +This command returns all risk detections for the specified user +### Example 3: Get riskDetections by risk type +```powershell +Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All" +Get-Mgriskdetection -Filter "RiskType eq 'anonymizedIPAddress'" |Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime + +UserDisplayName RiskType RiskLevel DetectedDateTime +--------------- -------- --------- ---------------- +Jason Mayer anonymizedIPAddress high 4/21/2022 9:50:28 PM +Jason Mayer anonymizedIPAddress medium 4/19/2022 10:44:40 PM +Alex Su anonymizedIPAddress high 6/9/2022 4:31:19 AM +``` + +This command returns all risk detections for the anonymizedIPAddress risk detection + +### Example 4: Get all riskDetections for a particular user with high risk +```powershell +Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All" +Get-Mgriskdetection -Filter "userdisplayname eq 'Jason Mayer' and Risklevel eq 'high'" |Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime + +UserDisplayName RiskType RiskLevel DetectedDateTime +--------------- -------- --------- ---------------- +Jason Mayer anonymizedIPAddress high 4/21/2022 9:50:28 PM +Jason Mayer unfamiliarFeatures high 4/21/2022 10:07:33 PM +``` +This command returns all risk detections with high risks for the specified user From 94dba3f2038c7f00c3e356f3f20bd1fbe1f3909b Mon Sep 17 00:00:00 2001 From: Tracy YU Date: Mon, 11 Jul 2022 16:41:31 +1000 Subject: [PATCH 2/3] Update Get-MgRiskDetection.md fix the filter for example 2 --- .../Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md b/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md index 476cf53486f..ffb8f9c9b05 100644 --- a/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md +++ b/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md @@ -20,7 +20,7 @@ This command returns a list of all users. ### Example 2: Get riskDetections by user displayname ```powershell Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All" -Get-Mgriskdetection -All|Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime +Get-Mgriskdetection -Filter "userdisplayname eq 'Jason Mayer'"|Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime UserDisplayName RiskType RiskLevel DetectedDateTime --------------- -------- --------- ---------------- From cf152c0c4ccec03b84967c5a62e6954c20b9b8c6 Mon Sep 17 00:00:00 2001 From: Tracy YU Date: Mon, 11 Jul 2022 17:02:09 +1000 Subject: [PATCH 3/3] Update Get-MgRiskDetection.md Fix casing of Get-MgRiskDetection commands include spaces between commands and comma --- .../examples/v1.0-beta/Get-MgRiskDetection.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md b/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md index ffb8f9c9b05..efc0e13f4ec 100644 --- a/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md +++ b/src/Identity.SignIns/Identity.SignIns/examples/v1.0-beta/Get-MgRiskDetection.md @@ -1,7 +1,7 @@ ### Example 1: Get all riskDetections ```powershell Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All" -Get-Mgriskdetection -All|Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime +Get-MgRiskDetection -All | Format-Table UserDisplayName, RiskType, RiskLevel, DetectedDateTime UserDisplayName RiskType RiskLevel DetectedDateTime --------------- -------- --------- ---------------- @@ -20,7 +20,7 @@ This command returns a list of all users. ### Example 2: Get riskDetections by user displayname ```powershell Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All" -Get-Mgriskdetection -Filter "userdisplayname eq 'Jason Mayer'"|Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime +Get-MgRiskDetection -Filter "UserDisplayname eq 'Jason Mayer'" | Format-Table UserDisplayName, RiskType, RiskLevel, DetectedDateTime UserDisplayName RiskType RiskLevel DetectedDateTime --------------- -------- --------- ---------------- @@ -37,7 +37,7 @@ This command returns all risk detections for the specified user ### Example 3: Get riskDetections by risk type ```powershell Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All" -Get-Mgriskdetection -Filter "RiskType eq 'anonymizedIPAddress'" |Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime +Get-MgRiskDetection -Filter "RiskType eq 'anonymizedIPAddress'" | Format-Table UserDisplayName, RiskType, RiskLevel, DetectedDateTime UserDisplayName RiskType RiskLevel DetectedDateTime --------------- -------- --------- ---------------- @@ -51,7 +51,7 @@ This command returns all risk detections for the anonymizedIPAddress risk detect ### Example 4: Get all riskDetections for a particular user with high risk ```powershell Connect-MgGraph -Scopes "IdentityRiskEvent.Read.All" -Get-Mgriskdetection -Filter "userdisplayname eq 'Jason Mayer' and Risklevel eq 'high'" |Format-Table UserDisplayName,RiskType,RiskLevel,DetectedDateTime +Get-MgRiskDetection -Filter "UserDisplayName eq 'Jason Mayer' and Risklevel eq 'high'" | Format-Table UserDisplayName, RiskType, RiskLevel, DetectedDateTime UserDisplayName RiskType RiskLevel DetectedDateTime --------------- -------- --------- ----------------