Commands › Exchange Online

Get-SpoofIntelligenceInsight

Exchange Online ExchangeOnlineManagement Get-*

View spoofed senders that were allowed or blocked by spoof intelligence during the last 30 days.

Quick start script

# Get-SpoofIntelligenceInsight — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-SpoofIntelligenceInsight | Format-List

# 3. Export for evidence / drift tracking
Get-SpoofIntelligenceInsight | Export-Clixml .\SpoofIntelligenceInsight-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-SpoofIntelligenceInsight [[-Identity] <HostedConnectionFilterPolicyIdParameter>] [<CommonParameters>]

Parameters (1)

ParameterTypeRequiredWhat it controls
-Identity HostedConnectionFilterPolicyIdParameter The Identity parameter is available but isn't used.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.