CmdID / PowerShell / Cmdlets / Get
Get-CompromisedUserAggregateReport
Use the Get-CompromisedUserAggregateReport cmdlet to return general data about compromised users for the last 10 days. Exchange PowerShell reference
From the Exchange PowerShell reference 5 parameters Its page in the reference
Parameters
-ActionThe Action parameter filters the results by the compromised user status.-EndDateThe EndDate parameter specifies the end date of the date range.-PageThe Page parameter specifies the page number of the results you want to view.-PageSizeThe PageSize parameter specifies the maximum number of entries per page.-StartDateThe StartDate parameter specifies the start date of the date range.