CmdID

CmdID / PowerShell / Cmdlets / New

New-ProtectionAlert

Use the New-ProtectionAlert cmdlet to create alert policies in the Microsoft Purview compliance portal and the Microsoft Defender portal. Exchange PowerShell reference

From the Exchange PowerShell reference 31 parameters Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

31 in the Exchange PowerShell reference
Show its 31 parameters
-CategoryThe Category parameter specifies a category for the alert policy.
-NameThe Name parameter specifies the unique name for the alert policy.
-NotifyUserThe NotifyUser parameter specifies the SMTP address of the user who receives notification messages for the alert policy.
-ThreatTypeThe ThreatType parameter specifies the type of activities that are monitored by the alert policy.
-AggregationTypeThe AggregationType parameter specifies the how the alert policy triggers alerts for multiple occurrences of monitored activity.
-AlertByThe AlertBy parameter specifies the scope for aggregated alert policies.
-AlertForThis parameter is reserved for internal Microsoft use.
-CommentThe Comment parameter specifies an optional comment.
-Confirm, -cfThe Confirm switch specifies whether to show or hide the confirmation prompt.
-CorrelationPolicyId
-CustomProperties
-DescriptionThe Description parameter specifies descriptive text for the alert policy.
-DisabledThe Disabled parameter enables or disables the alert policy.
-FilterThe Filter parameter uses OPATH syntax to filter the results by the specified properties and values.
-LogicalOperationName
-NotificationCultureThe NotificationCulture parameter specifies the language or locale that's used for notifications.
-NotificationEnabled
-NotifyUserOnFilterMatchThe NotifyUserOnFilterMatch parameter specifies whether to trigger an alert for a single event when the alert policy is configured for aggregated activity.
-NotifyUserSuppressionExpiryDateThe NotifyUserSuppressionExpiryDate parameter specifies whether to temporarily suspend notifications for the alert policy.
-NotifyUserThrottleThresholdThe NotifyUserThrottleThreshold parameter specifies the maximum number of notifications for the alert policy within the time period specified by the NotifyUserThrottleWindow parameter.
-NotifyUserThrottleWindowThe NotifyUserThrottleWindow parameter specifies the time interval in minutes that's used by the NotifyUserThrottleThreshold parameter.
-OperationThe Operation parameter specifies the activities that are monitored by the alert policy.
-PrivacyManagementScopedSensitiveInformationTypes
-PrivacyManagementScopedSensitiveInformationTypesForCounting
-PrivacyManagementScopedSensitiveInformationTypesThreshold
-SeverityThe Severity parameter specifies the severity of the detection.
-ThresholdThe Threshold parameter specifies the number of detections that must be exceeded within the time period defined by the TimeWindow parameter to trigger the alert policy.
-TimeWindowThe TimeWindow parameter specifies the time interval in minutes for number of detections specified by the Threshold parameter.
-UseCreatedDateTime
-VolumeThreshold
-WhatIf, -wiThe WhatIf switch doesn't work in Security & Compliance PowerShell.