Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The term 'Get-ProtectionAlert' is not recognized #263

Closed
SamErde opened this issue Sep 13, 2023 · 4 comments
Closed

The term 'Get-ProtectionAlert' is not recognized #263

SamErde opened this issue Sep 13, 2023 · 4 comments
Labels
question Further information is requested

Comments

@SamErde
Copy link

SamErde commented Sep 13, 2023

I ran this with the Exchange Online Management 3.3.0 module in PowerShell 7.3.6 and Windows PowerShell 5.1, and got the following error:

Get-ProtectionAlert: The term 'Get-ProtectionAlert' is not recognized as a name of a cmdlet, function, script file, or executable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.

Per the docs article for that cmdlet, "This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell."

It looks like the SCC module should be listed in the pre-requisites and installation section of the README unless I'm missing that detail somewhere already.

@SamErde
Copy link
Author

SamErde commented Sep 13, 2023

It has been a while since I've used the Security and Compliance module, but it looks like that functionality has been [mostly?] rolled into the Exchange Online Management module along with the Connect-IPPSSession cmdlet.

@SamErde
Copy link
Author

SamErde commented Sep 17, 2023

Will chip away at this as I find time. A search for that cmdlet only shows up one time in the repo: currently line 644 in the Get-ORCACollection function.

@cammurray
Copy link
Owner

Hey @SamErde, we run Get-ProtectionAlert since 2.4 for the purpose of ensuring the default alerts (which can trigger AIR, ZAP, etc) are not disabled. You can add -NoSCC to the Get-ORCAReport in order to bypass these checks.

SCC should be inside the Exchange Online Managemement module though?

Can you run Get-Command Connect-IPPSSession?

Do you get any errors (other than the missing command) when running Get-ORCAReport?

@cammurray cammurray added the question Further information is requested label Nov 16, 2023
@SamErde
Copy link
Author

SamErde commented Nov 22, 2023

I no longer have access to the environment where I experience this, but will continue to use and update if I see it happen elsewhere. Thanks!

@SamErde SamErde closed this as completed Nov 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants