CmdID

CmdID / PowerShell / Cmdlets / Get

Get-ExchangeServer

Use the Get-ExchangeServer cmdlet to view the properties of Exchange servers. Exchange PowerShell reference

From the Exchange PowerShell reference 4 parameters 1 Sigma rule looks for it Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

4 in the Exchange PowerShell reference
-IdentityThe Identity parameter specifies the Exchange server that you want to view.
-DomainThe Domain parameter filters the results by the fully qualified domain name (FQDN) of the domain (for example, contoso.com).
-DomainControllerThe DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory.
-StatusThe Status switch specifies whether to include additional property values in the results, for example, the Watson state, StaticDomainControllers, and runtime domain controller usage.

What looks for it

Sigma process creation rules that name Get-ExchangeServer
highExchange PowerShell Snap-Ins UsageFPT.EagleEye, Nasreddine Bencherchali (Nextron Systems)