Retrieves a single security recommendation by its ID or a list of all security recommendations affecting the organization.

Get-MdeRecommendation [-id <String>] [<CommonParameters>]

Get-MdeRecommendation [-filter <String>] [<CommonParameters>]

Retrieves a single security recommendation by its ID or a list of all security recommendations affecting the organization.

$recommendations = Get-MdeRecommendation

'

Get-MdeRecommendation -filter "vendor+eq+'microsoft'"

Optional. Specifies the id of the target MDE recommendation.

Type: String
Parameter Sets: id
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False

Optional. Specifies the OData filter for baseline configurations. A filter is supported for "id", "productName", "vendor", "recommendedVersion", "recommendationCategory", "subCategory", "severityScore", "remediationType", "recommendedProgram", "recommendedVendor", and "status".

Type: String
Parameter Sets: filter
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Author: Jan-Henrik Damaschke

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/get-all-recommendations?view=o365-worldwide