< Back

Get-MpThreatCatalog

Tue Jan 29, 2019 10:14 pm

NAME Get-MpThreatCatalog



SYNOPSIS

Gets known threats from the definitions catalog.





SYNTAX

Get-MpThreatCatalog [-CimSession <CimSession[]>] [-ThreatID <Int64[]>] [-ThrottleLimit <Int32>] [<CommonParameters>]





DESCRIPTION

The Get-MpThreatCatalog cmdlet gets known threats from the Windows Defender definitions catalog. The definitions catalog contains references to

all known threats that Windows Defender can identify.





PARAMETERS

-CimSession [<CimSession[]>]

Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession

or Get-CimSession cmdlet. The default is the current session on the local computer.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-ThreatID [<Int64[]>]

Specifies an array of threat IDs. This cmdlet gets the threats that you specify from the definitions catalog.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-ThrottleLimit [<Int32>]

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0

is entered, then Windows PowerShell???? calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running

on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).



INPUTS









OUTPUTS









Example 1: Get a known threat from the definitions catalog



PS C:\\> Get-MpThreatCatalog -ThreatID 1994



This command gets the known threat that has the ID 1994.







RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/?LinkId=317467

Get-MpThreatCatalog

Remove-MpThreat

Get-MpThreatDetection