Domain Detective

API Reference

Class

CmdletGetCertificateInventoryPolicyDrift

Namespace DomainDetective.PowerShell
Assembly DomainDetective.PowerShell
Base PSCmdlet
Modifiers sealed
Attributes
Cmdlet("Get", "DDCertificateInventoryPolicyDrift") Alias(["Get-CertificateInventoryPolicyDrift"]) OutputType([typeof(CertificateInventoryPolicyDriftSummary)])

Builds endpoint-level certificate policy drift between two persisted inventory snapshots.

Inheritance

  • PSCmdlet
  • CmdletGetCertificateInventoryPolicyDrift

Examples

Compare latest two snapshots with balanced baseline


Get-DDCertificateInventoryPolicyDrift -ChangedOnly
        

Compare selected snapshot timestamps with strict baseline


Get-DDCertificateInventoryPolicyDrift -BaselineProfile Strict -PreviousUtc (Get-Date).ToUniversalTime().AddDays(-7) -CurrentUtc (Get-Date).ToUniversalTime()
        

Apply policy overrides while comparing drift


Get-DDCertificateInventoryPolicyDrift -PolicyOverridesPath .\policy-overrides.json -ChangedOnly
        

Constructors

public CmdletGetCertificateInventoryPolicyDrift() #

Methods

ProcessRecord() #

Executes the cmdlet.

Properties

public String CacheDirectory { get; set; } #
Parameter(Mandatory = false)

Certificate monitor cache directory containing the inventory folder.

public Nullable<DateTime> SinceUtc { get; set; } #
Parameter(Mandatory = false)

Only include snapshots captured since this UTC date/time.

public Nullable<DateTime> PreviousUtc { get; set; } #
Parameter(Mandatory = false)

Optional previous snapshot selector (latest snapshot at or before this UTC time).

public Nullable<DateTime> CurrentUtc { get; set; } #
Parameter(Mandatory = false)

Optional current snapshot selector (latest snapshot at or before this UTC time).

public String BaselineProfile { get; set; } #
Parameter(Mandatory = false) ValidateSet(["Strict", "Balanced", "Legacy"])

Policy baseline profile to evaluate (Strict, Balanced, Legacy).

public SwitchParameter ChangedOnly { get; set; } #
Parameter(Mandatory = false)

Only return endpoint rows with detected policy drift.

public Int32 MaxEndpoints { get; set; } #
Parameter(Mandatory = false) ValidateRange(0, 2147483647)

Maximum endpoint rows returned.

public String PolicyOverridesPath { get; set; } #
Parameter(Mandatory = false)

Optional JSON file path with policy override rules.

{{ include "footer" }}