Skip to main content

Get-MtXspmExposedAuthenticationArtifact

SYNOPSIS​

Check data from Exposure Management for exposed token artifacts.

SYNTAX​

Get-MtXspmExposedAuthenticationArtifact

DESCRIPTION​

Executes KQL function over Exposure Management data to retrieve information about exposed token artifacts such as Primary Refresh Tokens, Session Cookies, and Azure CLI tokens. It enriches the data with device insights and alert evidence.

EXAMPLES​

EXAMPLE 1​

Get-MtXspmExposedAuthenticationArtifact
Returns a detailed list of exposed token artifacts, including their types, associated devices, and any relevant alert evidence.

PARAMETERS​

INPUTS​

OUTPUTS​

NOTES​

https://maester.dev/docs/commands/Get-MtXspmExposedAuthenticationArtifact