I am wanting to audit the defender tab in AD to determine if any users have changed the Temporary Response values. They may have changed the Temporary Response Expires default value or they may have checked "Allow response to be used multiple times" and assigned a response.
I tried using Get-ADUser username -Properties * | Select * but the defender values are not listed.
How can I find these values?
