PENDING Check Endpoint protection status with powershell

[kotten]

Under the node Monitoring and then 'Security/Endpoint Protection Status/Microsoft Defender Status'

There you can see if some clients are reporting error, i have something there with the name 'Active clients at risk: 15'
If i click on that one i can see all the clients that have something wrong with Defender.

I would like to run some powershell commands and see the exact same thing that i see in SCCM Console

Anyone know how?
I have checked 'Get-CMAlert' but cant find this here