About Get-SecurityAlert command

Hi, got the problem: Get-SecurityAlert brings you all providers (including AIP “risky sign-ins”). Without registering apps, use Microsoft Graph PowerShell with delegation and filter only MDEs. Here, super-synthetic: open an InPrivate session → Connect-MgGraph -Scopes "SecurityEvents.Read.All" → MDE only: Get-MgSecurityAlertV2 -All -Filter "serviceSource eq 'microsoftDefenderForEndpoint'" (if you don't have V2: Get-MgSecurityAlert -All -Filter "vendorInformation/provider eq 'Microsoft Defender for Endpoint'"). To exclude risky sign-ins: add and serviceSource to 'azureAdIdentityProtection' (or, on v1, and category to 'Risky sign-in'). If it doesn't get them all, it's pagination: use -All (or -PageSize 1000) and, if necessary, repeat with Invoke-MgGraphRequest following the @odata.nextLink. You can also narrow by date: ... and createdDateTime ge 2025-08-01T00:00:00Z. This way, you only get Microsoft Defender for Endpoint alerts with delegated permissions and without having to register your own app.