Commands
Lists security recommendations collected from Microsoft Defender for Cloud, one row per recommendation per resource, ordered by Defender's own risk level.
Lists attack paths collected from Microsoft Defender for Cloud. Empty unless the Defender CSPM plan is enabled on the subscription.
Lists posture transitions found between collection cycles of Microsoft Defender for Cloud data: newly found, resolved and reopened recommendations. Unchanged findings produce no rows.
Lists compliance assessments collected from Microsoft Defender for Cloud with the number of resources that passed and failed.
Lists the controls of a compliance standard collected from Microsoft Defender for Cloud with their state and assessment counts.
Lists regulatory compliance standards collected from Microsoft Defender for Cloud with their pass and fail control counts.
Lists secure score controls collected from Microsoft Defender for Cloud, ordered by the score still available - the controls worth fixing first.
Lists vulnerabilities collected from Microsoft Defender for Cloud, one row per affected resource, so each row names the CVE, the asset that carries it and the version that closes it.
Lists the asset inventory collected from Microsoft Defender for Cloud, one row per resource, with its finding counts and the Defender plan that covers it.