CmdID / PowerShell / Cmdlets / Get
Get-CompromisedUserDetailReport
Use the Get-CompromisedUserDetailReport cmdlet to return detailed information about compromised users for the last 10 days. Exchange PowerShell reference
From the Exchange PowerShell reference 5 parameters Its page in the reference
Parameters
-ActionThe Action parameter filters the results by the compromised user status.-EndDateThe EndDate parameter specifies the end date of the date range.-PageThis parameter is reserved for internal Microsoft use.-PageSizeThe PageSize parameter specifies the maximum number of entries per page.-StartDateThe StartDate parameter specifies the start date of the date range.