Commands › Exchange Online

Get-DlpSiDetectionsReport

Exchange Online ExchangeOnlineManagement Get-*

For more information, see Security & Compliance PowerShell. **Note**: This cmdlet will be retired. Use the Export-ActivityExplorerData cmdlet to view DLP information. Data from Export-ActivityExplorerData is the same as the retired Get-DlpIncidentDetailReport cmdlet. Use the Get-DlpSiDetectionsReport cmdlet to view information about data loss prevention (DLP) sensitive information type detections in the Microsoft Purview compliance portal for the last 90 days.

Quick start script

# Get-DlpSiDetectionsReport — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-DlpSiDetectionsReport | Format-List

# 3. Export for evidence / drift tracking
Get-DlpSiDetectionsReport | Export-Clixml .\DlpSiDetectionsReport-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-DlpSiDetectionsReport [-EndDate <DateTime>]
 [-SensitiveType <MultiValuedProperty>]
 [<CommonParameters>]

Parameters (2)

Parameter	Type	Required	What it controls
-EndDate	DateTime		The EndDate parameter specifies the end date of the date range.
-SensitiveType	MultiValuedProperty		The SensitiveType parameter filters the results by the specified sensitive information type. A valid value is the GUID of the sensitive information type (for example, 0e9b3178-9678-47dd-a509-37222ca96b42). To find...

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.