MSFT_MpPreference

$HighThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

switch([int]$value)
{
  1          {'Clean'}
  2          {'Quarantine'}
  3          {'Remove'}
  6          {'Allow'}
  8          {'UserDefined'}
  9          {'NoAction'}
  10         {'Block'}
  default    {"$value"}
}

Enum EnumHighThreatDefaultAction
{
  Clean         = 1
  Quarantine    = 2
  Remove        = 3
  Allow         = 6
  UserDefined   = 8
  NoAction      = 9
  Block         = 10
}

<# 
  this example uses a hashtable to translate raw numeric values for 
  property "HighThreatDefaultAction" to friendly text

  Note: to use other properties than "HighThreatDefaultAction", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "HighThreatDefaultAction" 
# to translate other properties, use their translation table instead
$HighThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

#endregion define hashtable

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "HighThreatDefaultAction", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$HighThreatDefaultAction = @{
  Name = 'HighThreatDefaultAction'
  Expression = {
    # property is an array, so process all values
    $value = $_.HighThreatDefaultAction
    $HighThreatDefaultAction_map[[int]$value]
  }  
}
#endregion define calculated property

# retrieve the instances, and output the properties "Caption" and "HighThreatDefaultAction". The latter
# is defined by the hashtable in $HighThreatDefaultAction: 
Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -Property Caption, $HighThreatDefaultAction

# ...or dump content of property HighThreatDefaultAction:
$friendlyValues = Get-CimInstance -Class MSFT_MpPreference | 
    Select-Object -Property $HighThreatDefaultAction |
    Select-Object -ExpandProperty HighThreatDefaultAction

# output values
$friendlyValues

# output values as comma separated list
$friendlyValues -join ', '

# output values as bullet list
$friendlyValues | ForEach-Object { "- $_" }

<# 
  this example uses a hashtable to manually translate raw numeric values 
  for property "MSFT_MpPreference" to friendly text. This approach is ideal when
  there is just one instance to work with.

  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MSFT_MpPreference" 
# to translate other properties, use their translation table instead
$HighThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

#endregion define hashtable

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to illustrate
  the number-to-text translation. To process all instances, replace
  "Select-Object -First 1" with a "Foreach-Object" loop, and use
  the iterator variable $_ instead of $instance
#>

# query the property
$rawValue = $instance.HighThreatDefaultAction  

# translate raw value to friendly text:
$friendlyName = $HighThreatDefaultAction_map[[int]$rawValue]

# output value
$friendlyName

<# 
  this example uses a switch clause to translate raw numeric 
  values for property "HighThreatDefaultAction" to friendly text. The switch
  clause is embedded into a calculated property so there is
  no need to refer to external variables for translation.

  Note: to use other properties than "HighThreatDefaultAction", look up the appropriate 
  translation switch clause for the property you would like to use instead.
#>

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "HighThreatDefaultAction", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$HighThreatDefaultAction = @{
  Name = 'HighThreatDefaultAction'
  Expression = {
    # property is an array, so process all values
    $value = $_.HighThreatDefaultAction
    
    switch([int]$value)
      {
        1          {'Clean'}
        2          {'Quarantine'}
        3          {'Remove'}
        6          {'Allow'}
        8          {'UserDefined'}
        9          {'NoAction'}
        10         {'Block'}
        default    {"$value"}
      }
      
  }  
}
#endregion define calculated property

# retrieve all instances...
Get-CimInstance -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender | 
  # ...and output properties "Caption" and "HighThreatDefaultAction". The latter is defined
  # by the hashtable in $HighThreatDefaultAction:
  Select-Object -Property Caption, $HighThreatDefaultAction

<# 
  this example translates raw values by means of type conversion
  the friendly names are defined as enumeration using the
  keyword "enum" (PowerShell 5 or better)
  
  The raw value(s) are translated to friendly text by 
  simply converting them into the enum type.
  
  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  enum definition for the property you would like to use instead.
#>


#region define enum with value-to-text translation:
Enum EnumHighThreatDefaultAction
{
  Clean         = 1
  Quarantine    = 2
  Remove        = 3
  Allow         = 6
  UserDefined   = 8
  NoAction      = 9
  Block         = 10
}

#endregion define enum

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to focus on
  the number-to-text type conversion. 
  
  To process all instances, replace   "Select-Object -First 1" 
  with a "Foreach-Object" loop, and use the iterator variable 
  $_ instead of $instance
#>

# query the property:
$rawValue = $instance.HighThreatDefaultAction

#region using strict type conversion

<#
  Note: strict type conversion fails if the raw value is 
  not defined by the enum. So if the list of allowable values
  was extended and the enum does not match the value,
  an exception is thrown
#>

# convert the property to the enum **HighThreatDefaultAction** 
[EnumHighThreatDefaultAction]$rawValue 

# get a comma-separated string:
[EnumHighThreatDefaultAction]$rawValue -join ',' 
#endregion

#region using operator "-as"

<#
  Note: the operator "-as" accepts values not defined
  by the enum and returns $null instead of throwing
  an exception
#>

$rawValue -as [EnumHighThreatDefaultAction]
#endregion

$LowThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

switch([int]$value)
{
  1          {'Clean'}
  2          {'Quarantine'}
  3          {'Remove'}
  6          {'Allow'}
  8          {'UserDefined'}
  9          {'NoAction'}
  10         {'Block'}
  default    {"$value"}
}

Enum EnumLowThreatDefaultAction
{
  Clean         = 1
  Quarantine    = 2
  Remove        = 3
  Allow         = 6
  UserDefined   = 8
  NoAction      = 9
  Block         = 10
}

<# 
  this example uses a hashtable to translate raw numeric values for 
  property "LowThreatDefaultAction" to friendly text

  Note: to use other properties than "LowThreatDefaultAction", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "LowThreatDefaultAction" 
# to translate other properties, use their translation table instead
$LowThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

#endregion define hashtable

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "LowThreatDefaultAction", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$LowThreatDefaultAction = @{
  Name = 'LowThreatDefaultAction'
  Expression = {
    # property is an array, so process all values
    $value = $_.LowThreatDefaultAction
    $LowThreatDefaultAction_map[[int]$value]
  }  
}
#endregion define calculated property

# retrieve the instances, and output the properties "Caption" and "LowThreatDefaultAction". The latter
# is defined by the hashtable in $LowThreatDefaultAction: 
Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -Property Caption, $LowThreatDefaultAction

# ...or dump content of property LowThreatDefaultAction:
$friendlyValues = Get-CimInstance -Class MSFT_MpPreference | 
    Select-Object -Property $LowThreatDefaultAction |
    Select-Object -ExpandProperty LowThreatDefaultAction

# output values
$friendlyValues

# output values as comma separated list
$friendlyValues -join ', '

# output values as bullet list
$friendlyValues | ForEach-Object { "- $_" }

<# 
  this example uses a hashtable to manually translate raw numeric values 
  for property "MSFT_MpPreference" to friendly text. This approach is ideal when
  there is just one instance to work with.

  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MSFT_MpPreference" 
# to translate other properties, use their translation table instead
$LowThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

#endregion define hashtable

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to illustrate
  the number-to-text translation. To process all instances, replace
  "Select-Object -First 1" with a "Foreach-Object" loop, and use
  the iterator variable $_ instead of $instance
#>

# query the property
$rawValue = $instance.LowThreatDefaultAction  

# translate raw value to friendly text:
$friendlyName = $LowThreatDefaultAction_map[[int]$rawValue]

# output value
$friendlyName

<# 
  this example uses a switch clause to translate raw numeric 
  values for property "LowThreatDefaultAction" to friendly text. The switch
  clause is embedded into a calculated property so there is
  no need to refer to external variables for translation.

  Note: to use other properties than "LowThreatDefaultAction", look up the appropriate 
  translation switch clause for the property you would like to use instead.
#>

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "LowThreatDefaultAction", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$LowThreatDefaultAction = @{
  Name = 'LowThreatDefaultAction'
  Expression = {
    # property is an array, so process all values
    $value = $_.LowThreatDefaultAction
    
    switch([int]$value)
      {
        1          {'Clean'}
        2          {'Quarantine'}
        3          {'Remove'}
        6          {'Allow'}
        8          {'UserDefined'}
        9          {'NoAction'}
        10         {'Block'}
        default    {"$value"}
      }
      
  }  
}
#endregion define calculated property

# retrieve all instances...
Get-CimInstance -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender | 
  # ...and output properties "Caption" and "LowThreatDefaultAction". The latter is defined
  # by the hashtable in $LowThreatDefaultAction:
  Select-Object -Property Caption, $LowThreatDefaultAction

<# 
  this example translates raw values by means of type conversion
  the friendly names are defined as enumeration using the
  keyword "enum" (PowerShell 5 or better)
  
  The raw value(s) are translated to friendly text by 
  simply converting them into the enum type.
  
  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  enum definition for the property you would like to use instead.
#>


#region define enum with value-to-text translation:
Enum EnumLowThreatDefaultAction
{
  Clean         = 1
  Quarantine    = 2
  Remove        = 3
  Allow         = 6
  UserDefined   = 8
  NoAction      = 9
  Block         = 10
}

#endregion define enum

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to focus on
  the number-to-text type conversion. 
  
  To process all instances, replace   "Select-Object -First 1" 
  with a "Foreach-Object" loop, and use the iterator variable 
  $_ instead of $instance
#>

# query the property:
$rawValue = $instance.LowThreatDefaultAction

#region using strict type conversion

<#
  Note: strict type conversion fails if the raw value is 
  not defined by the enum. So if the list of allowable values
  was extended and the enum does not match the value,
  an exception is thrown
#>

# convert the property to the enum **LowThreatDefaultAction** 
[EnumLowThreatDefaultAction]$rawValue 

# get a comma-separated string:
[EnumLowThreatDefaultAction]$rawValue -join ',' 
#endregion

#region using operator "-as"

<#
  Note: the operator "-as" accepts values not defined
  by the enum and returns $null instead of throwing
  an exception
#>

$rawValue -as [EnumLowThreatDefaultAction]
#endregion

$MAPSReporting_map = @{
      0 = 'Disabled'
      1 = 'Basic'
      2 = 'Advanced'
}

switch([int]$value)
{
  0          {'Disabled'}
  1          {'Basic'}
  2          {'Advanced'}
  default    {"$value"}
}

Enum EnumMAPSReporting
{
  Disabled   = 0
  Basic      = 1
  Advanced   = 2
}

<# 
  this example uses a hashtable to translate raw numeric values for 
  property "MAPSReporting" to friendly text

  Note: to use other properties than "MAPSReporting", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MAPSReporting" 
# to translate other properties, use their translation table instead
$MAPSReporting_map = @{
      0 = 'Disabled'
      1 = 'Basic'
      2 = 'Advanced'
}

#endregion define hashtable

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "MAPSReporting", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$MAPSReporting = @{
  Name = 'MAPSReporting'
  Expression = {
    # property is an array, so process all values
    $value = $_.MAPSReporting
    $MAPSReporting_map[[int]$value]
  }  
}
#endregion define calculated property

# retrieve the instances, and output the properties "Caption" and "MAPSReporting". The latter
# is defined by the hashtable in $MAPSReporting: 
Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -Property Caption, $MAPSReporting

# ...or dump content of property MAPSReporting:
$friendlyValues = Get-CimInstance -Class MSFT_MpPreference | 
    Select-Object -Property $MAPSReporting |
    Select-Object -ExpandProperty MAPSReporting

# output values
$friendlyValues

# output values as comma separated list
$friendlyValues -join ', '

# output values as bullet list
$friendlyValues | ForEach-Object { "- $_" }

<# 
  this example uses a hashtable to manually translate raw numeric values 
  for property "MSFT_MpPreference" to friendly text. This approach is ideal when
  there is just one instance to work with.

  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MSFT_MpPreference" 
# to translate other properties, use their translation table instead
$MAPSReporting_map = @{
      0 = 'Disabled'
      1 = 'Basic'
      2 = 'Advanced'
}

#endregion define hashtable

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to illustrate
  the number-to-text translation. To process all instances, replace
  "Select-Object -First 1" with a "Foreach-Object" loop, and use
  the iterator variable $_ instead of $instance
#>

# query the property
$rawValue = $instance.MAPSReporting  

# translate raw value to friendly text:
$friendlyName = $MAPSReporting_map[[int]$rawValue]

# output value
$friendlyName

<# 
  this example uses a switch clause to translate raw numeric 
  values for property "MAPSReporting" to friendly text. The switch
  clause is embedded into a calculated property so there is
  no need to refer to external variables for translation.

  Note: to use other properties than "MAPSReporting", look up the appropriate 
  translation switch clause for the property you would like to use instead.
#>

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "MAPSReporting", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$MAPSReporting = @{
  Name = 'MAPSReporting'
  Expression = {
    # property is an array, so process all values
    $value = $_.MAPSReporting
    
    switch([int]$value)
      {
        0          {'Disabled'}
        1          {'Basic'}
        2          {'Advanced'}
        default    {"$value"}
      }
      
  }  
}
#endregion define calculated property

# retrieve all instances...
Get-CimInstance -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender | 
  # ...and output properties "Caption" and "MAPSReporting". The latter is defined
  # by the hashtable in $MAPSReporting:
  Select-Object -Property Caption, $MAPSReporting

<# 
  this example translates raw values by means of type conversion
  the friendly names are defined as enumeration using the
  keyword "enum" (PowerShell 5 or better)
  
  The raw value(s) are translated to friendly text by 
  simply converting them into the enum type.
  
  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  enum definition for the property you would like to use instead.
#>


#region define enum with value-to-text translation:
Enum EnumMAPSReporting
{
  Disabled   = 0
  Basic      = 1
  Advanced   = 2
}

#endregion define enum

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to focus on
  the number-to-text type conversion. 
  
  To process all instances, replace   "Select-Object -First 1" 
  with a "Foreach-Object" loop, and use the iterator variable 
  $_ instead of $instance
#>

# query the property:
$rawValue = $instance.MAPSReporting

#region using strict type conversion

<#
  Note: strict type conversion fails if the raw value is 
  not defined by the enum. So if the list of allowable values
  was extended and the enum does not match the value,
  an exception is thrown
#>

# convert the property to the enum **MAPSReporting** 
[EnumMAPSReporting]$rawValue 

# get a comma-separated string:
[EnumMAPSReporting]$rawValue -join ',' 
#endregion

#region using operator "-as"

<#
  Note: the operator "-as" accepts values not defined
  by the enum and returns $null instead of throwing
  an exception
#>

$rawValue -as [EnumMAPSReporting]
#endregion

$ModerateThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

switch([int]$value)
{
  1          {'Clean'}
  2          {'Quarantine'}
  3          {'Remove'}
  6          {'Allow'}
  8          {'UserDefined'}
  9          {'NoAction'}
  10         {'Block'}
  default    {"$value"}
}

Enum EnumModerateThreatDefaultAction
{
  Clean         = 1
  Quarantine    = 2
  Remove        = 3
  Allow         = 6
  UserDefined   = 8
  NoAction      = 9
  Block         = 10
}

<# 
  this example uses a hashtable to translate raw numeric values for 
  property "ModerateThreatDefaultAction" to friendly text

  Note: to use other properties than "ModerateThreatDefaultAction", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "ModerateThreatDefaultAction" 
# to translate other properties, use their translation table instead
$ModerateThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

#endregion define hashtable

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "ModerateThreatDefaultAction", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$ModerateThreatDefaultAction = @{
  Name = 'ModerateThreatDefaultAction'
  Expression = {
    # property is an array, so process all values
    $value = $_.ModerateThreatDefaultAction
    $ModerateThreatDefaultAction_map[[int]$value]
  }  
}
#endregion define calculated property

# retrieve the instances, and output the properties "Caption" and "ModerateThreatDefaultAction". The latter
# is defined by the hashtable in $ModerateThreatDefaultAction: 
Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -Property Caption, $ModerateThreatDefaultAction

# ...or dump content of property ModerateThreatDefaultAction:
$friendlyValues = Get-CimInstance -Class MSFT_MpPreference | 
    Select-Object -Property $ModerateThreatDefaultAction |
    Select-Object -ExpandProperty ModerateThreatDefaultAction

# output values
$friendlyValues

# output values as comma separated list
$friendlyValues -join ', '

# output values as bullet list
$friendlyValues | ForEach-Object { "- $_" }

<# 
  this example uses a hashtable to manually translate raw numeric values 
  for property "MSFT_MpPreference" to friendly text. This approach is ideal when
  there is just one instance to work with.

  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MSFT_MpPreference" 
# to translate other properties, use their translation table instead
$ModerateThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

#endregion define hashtable

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to illustrate
  the number-to-text translation. To process all instances, replace
  "Select-Object -First 1" with a "Foreach-Object" loop, and use
  the iterator variable $_ instead of $instance
#>

# query the property
$rawValue = $instance.ModerateThreatDefaultAction  

# translate raw value to friendly text:
$friendlyName = $ModerateThreatDefaultAction_map[[int]$rawValue]

# output value
$friendlyName

<# 
  this example uses a switch clause to translate raw numeric 
  values for property "ModerateThreatDefaultAction" to friendly text. The switch
  clause is embedded into a calculated property so there is
  no need to refer to external variables for translation.

  Note: to use other properties than "ModerateThreatDefaultAction", look up the appropriate 
  translation switch clause for the property you would like to use instead.
#>

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "ModerateThreatDefaultAction", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$ModerateThreatDefaultAction = @{
  Name = 'ModerateThreatDefaultAction'
  Expression = {
    # property is an array, so process all values
    $value = $_.ModerateThreatDefaultAction
    
    switch([int]$value)
      {
        1          {'Clean'}
        2          {'Quarantine'}
        3          {'Remove'}
        6          {'Allow'}
        8          {'UserDefined'}
        9          {'NoAction'}
        10         {'Block'}
        default    {"$value"}
      }
      
  }  
}
#endregion define calculated property

# retrieve all instances...
Get-CimInstance -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender | 
  # ...and output properties "Caption" and "ModerateThreatDefaultAction". The latter is defined
  # by the hashtable in $ModerateThreatDefaultAction:
  Select-Object -Property Caption, $ModerateThreatDefaultAction

<# 
  this example translates raw values by means of type conversion
  the friendly names are defined as enumeration using the
  keyword "enum" (PowerShell 5 or better)
  
  The raw value(s) are translated to friendly text by 
  simply converting them into the enum type.
  
  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  enum definition for the property you would like to use instead.
#>


#region define enum with value-to-text translation:
Enum EnumModerateThreatDefaultAction
{
  Clean         = 1
  Quarantine    = 2
  Remove        = 3
  Allow         = 6
  UserDefined   = 8
  NoAction      = 9
  Block         = 10
}

#endregion define enum

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to focus on
  the number-to-text type conversion. 
  
  To process all instances, replace   "Select-Object -First 1" 
  with a "Foreach-Object" loop, and use the iterator variable 
  $_ instead of $instance
#>

# query the property:
$rawValue = $instance.ModerateThreatDefaultAction

#region using strict type conversion

<#
  Note: strict type conversion fails if the raw value is 
  not defined by the enum. So if the list of allowable values
  was extended and the enum does not match the value,
  an exception is thrown
#>

# convert the property to the enum **ModerateThreatDefaultAction** 
[EnumModerateThreatDefaultAction]$rawValue 

# get a comma-separated string:
[EnumModerateThreatDefaultAction]$rawValue -join ',' 
#endregion

#region using operator "-as"

<#
  Note: the operator "-as" accepts values not defined
  by the enum and returns $null instead of throwing
  an exception
#>

$rawValue -as [EnumModerateThreatDefaultAction]
#endregion

$RealTimeScanDirection_map = @{
      0 = 'Both'
      1 = 'Incoming'
      2 = 'Outcoming'
}

switch([int]$value)
{
  0          {'Both'}
  1          {'Incoming'}
  2          {'Outcoming'}
  default    {"$value"}
}

Enum EnumRealTimeScanDirection
{
  Both        = 0
  Incoming    = 1
  Outcoming   = 2
}

<# 
  this example uses a hashtable to translate raw numeric values for 
  property "RealTimeScanDirection" to friendly text

  Note: to use other properties than "RealTimeScanDirection", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "RealTimeScanDirection" 
# to translate other properties, use their translation table instead
$RealTimeScanDirection_map = @{
      0 = 'Both'
      1 = 'Incoming'
      2 = 'Outcoming'
}

#endregion define hashtable

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "RealTimeScanDirection", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$RealTimeScanDirection = @{
  Name = 'RealTimeScanDirection'
  Expression = {
    # property is an array, so process all values
    $value = $_.RealTimeScanDirection
    $RealTimeScanDirection_map[[int]$value]
  }  
}
#endregion define calculated property

# retrieve the instances, and output the properties "Caption" and "RealTimeScanDirection". The latter
# is defined by the hashtable in $RealTimeScanDirection: 
Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -Property Caption, $RealTimeScanDirection

# ...or dump content of property RealTimeScanDirection:
$friendlyValues = Get-CimInstance -Class MSFT_MpPreference | 
    Select-Object -Property $RealTimeScanDirection |
    Select-Object -ExpandProperty RealTimeScanDirection

# output values
$friendlyValues

# output values as comma separated list
$friendlyValues -join ', '

# output values as bullet list
$friendlyValues | ForEach-Object { "- $_" }

<# 
  this example uses a hashtable to manually translate raw numeric values 
  for property "MSFT_MpPreference" to friendly text. This approach is ideal when
  there is just one instance to work with.

  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MSFT_MpPreference" 
# to translate other properties, use their translation table instead
$RealTimeScanDirection_map = @{
      0 = 'Both'
      1 = 'Incoming'
      2 = 'Outcoming'
}

#endregion define hashtable

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to illustrate
  the number-to-text translation. To process all instances, replace
  "Select-Object -First 1" with a "Foreach-Object" loop, and use
  the iterator variable $_ instead of $instance
#>

# query the property
$rawValue = $instance.RealTimeScanDirection  

# translate raw value to friendly text:
$friendlyName = $RealTimeScanDirection_map[[int]$rawValue]

# output value
$friendlyName

<# 
  this example uses a switch clause to translate raw numeric 
  values for property "RealTimeScanDirection" to friendly text. The switch
  clause is embedded into a calculated property so there is
  no need to refer to external variables for translation.

  Note: to use other properties than "RealTimeScanDirection", look up the appropriate 
  translation switch clause for the property you would like to use instead.
#>

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "RealTimeScanDirection", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$RealTimeScanDirection = @{
  Name = 'RealTimeScanDirection'
  Expression = {
    # property is an array, so process all values
    $value = $_.RealTimeScanDirection
    
    switch([int]$value)
      {
        0          {'Both'}
        1          {'Incoming'}
        2          {'Outcoming'}
        default    {"$value"}
      }
      
  }  
}
#endregion define calculated property

# retrieve all instances...
Get-CimInstance -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender | 
  # ...and output properties "Caption" and "RealTimeScanDirection". The latter is defined
  # by the hashtable in $RealTimeScanDirection:
  Select-Object -Property Caption, $RealTimeScanDirection

<# 
  this example translates raw values by means of type conversion
  the friendly names are defined as enumeration using the
  keyword "enum" (PowerShell 5 or better)
  
  The raw value(s) are translated to friendly text by 
  simply converting them into the enum type.
  
  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  enum definition for the property you would like to use instead.
#>


#region define enum with value-to-text translation:
Enum EnumRealTimeScanDirection
{
  Both        = 0
  Incoming    = 1
  Outcoming   = 2
}

#endregion define enum

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to focus on
  the number-to-text type conversion. 
  
  To process all instances, replace   "Select-Object -First 1" 
  with a "Foreach-Object" loop, and use the iterator variable 
  $_ instead of $instance
#>

# query the property:
$rawValue = $instance.RealTimeScanDirection

#region using strict type conversion

<#
  Note: strict type conversion fails if the raw value is 
  not defined by the enum. So if the list of allowable values
  was extended and the enum does not match the value,
  an exception is thrown
#>

# convert the property to the enum **RealTimeScanDirection** 
[EnumRealTimeScanDirection]$rawValue 

# get a comma-separated string:
[EnumRealTimeScanDirection]$rawValue -join ',' 
#endregion

#region using operator "-as"

<#
  Note: the operator "-as" accepts values not defined
  by the enum and returns $null instead of throwing
  an exception
#>

$rawValue -as [EnumRealTimeScanDirection]
#endregion

$RemediationScheduleDay_map = @{
      0 = 'Every Day'
      1 = 'Sunday'
      2 = 'Monday'
      3 = 'Tuesday'
      4 = 'Wednesday'
      5 = 'Thursday'
      6 = 'Friday'
      7 = 'Saturday'
      8 = 'Never'
}

switch([int]$value)
{
  0          {'Every Day'}
  1          {'Sunday'}
  2          {'Monday'}
  3          {'Tuesday'}
  4          {'Wednesday'}
  5          {'Thursday'}
  6          {'Friday'}
  7          {'Saturday'}
  8          {'Never'}
  default    {"$value"}
}

Enum EnumRemediationScheduleDay
{
  Every_Day   = 0
  Sunday      = 1
  Monday      = 2
  Tuesday     = 3
  Wednesday   = 4
  Thursday    = 5
  Friday      = 6
  Saturday    = 7
  Never       = 8
}

<# 
  this example uses a hashtable to translate raw numeric values for 
  property "RemediationScheduleDay" to friendly text

  Note: to use other properties than "RemediationScheduleDay", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "RemediationScheduleDay" 
# to translate other properties, use their translation table instead
$RemediationScheduleDay_map = @{
      0 = 'Every Day'
      1 = 'Sunday'
      2 = 'Monday'
      3 = 'Tuesday'
      4 = 'Wednesday'
      5 = 'Thursday'
      6 = 'Friday'
      7 = 'Saturday'
      8 = 'Never'
}

#endregion define hashtable

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "RemediationScheduleDay", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$RemediationScheduleDay = @{
  Name = 'RemediationScheduleDay'
  Expression = {
    # property is an array, so process all values
    $value = $_.RemediationScheduleDay
    $RemediationScheduleDay_map[[int]$value]
  }  
}
#endregion define calculated property

# retrieve the instances, and output the properties "Caption" and "RemediationScheduleDay". The latter
# is defined by the hashtable in $RemediationScheduleDay: 
Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -Property Caption, $RemediationScheduleDay

# ...or dump content of property RemediationScheduleDay:
$friendlyValues = Get-CimInstance -Class MSFT_MpPreference | 
    Select-Object -Property $RemediationScheduleDay |
    Select-Object -ExpandProperty RemediationScheduleDay

# output values
$friendlyValues

# output values as comma separated list
$friendlyValues -join ', '

# output values as bullet list
$friendlyValues | ForEach-Object { "- $_" }

<# 
  this example uses a hashtable to manually translate raw numeric values 
  for property "MSFT_MpPreference" to friendly text. This approach is ideal when
  there is just one instance to work with.

  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MSFT_MpPreference" 
# to translate other properties, use their translation table instead
$RemediationScheduleDay_map = @{
      0 = 'Every Day'
      1 = 'Sunday'
      2 = 'Monday'
      3 = 'Tuesday'
      4 = 'Wednesday'
      5 = 'Thursday'
      6 = 'Friday'
      7 = 'Saturday'
      8 = 'Never'
}

#endregion define hashtable

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to illustrate
  the number-to-text translation. To process all instances, replace
  "Select-Object -First 1" with a "Foreach-Object" loop, and use
  the iterator variable $_ instead of $instance
#>

# query the property
$rawValue = $instance.RemediationScheduleDay  

# translate raw value to friendly text:
$friendlyName = $RemediationScheduleDay_map[[int]$rawValue]

# output value
$friendlyName

<# 
  this example uses a switch clause to translate raw numeric 
  values for property "RemediationScheduleDay" to friendly text. The switch
  clause is embedded into a calculated property so there is
  no need to refer to external variables for translation.

  Note: to use other properties than "RemediationScheduleDay", look up the appropriate 
  translation switch clause for the property you would like to use instead.
#>

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "RemediationScheduleDay", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$RemediationScheduleDay = @{
  Name = 'RemediationScheduleDay'
  Expression = {
    # property is an array, so process all values
    $value = $_.RemediationScheduleDay
    
    switch([int]$value)
      {
        0          {'Every Day'}
        1          {'Sunday'}
        2          {'Monday'}
        3          {'Tuesday'}
        4          {'Wednesday'}
        5          {'Thursday'}
        6          {'Friday'}
        7          {'Saturday'}
        8          {'Never'}
        default    {"$value"}
      }
      
  }  
}
#endregion define calculated property

# retrieve all instances...
Get-CimInstance -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender | 
  # ...and output properties "Caption" and "RemediationScheduleDay". The latter is defined
  # by the hashtable in $RemediationScheduleDay:
  Select-Object -Property Caption, $RemediationScheduleDay

<# 
  this example translates raw values by means of type conversion
  the friendly names are defined as enumeration using the
  keyword "enum" (PowerShell 5 or better)
  
  The raw value(s) are translated to friendly text by 
  simply converting them into the enum type.
  
  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  enum definition for the property you would like to use instead.
#>


#region define enum with value-to-text translation:
Enum EnumRemediationScheduleDay
{
  Every_Day   = 0
  Sunday      = 1
  Monday      = 2
  Tuesday     = 3
  Wednesday   = 4
  Thursday    = 5
  Friday      = 6
  Saturday    = 7
  Never       = 8
}

#endregion define enum

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to focus on
  the number-to-text type conversion. 
  
  To process all instances, replace   "Select-Object -First 1" 
  with a "Foreach-Object" loop, and use the iterator variable 
  $_ instead of $instance
#>

# query the property:
$rawValue = $instance.RemediationScheduleDay

#region using strict type conversion

<#
  Note: strict type conversion fails if the raw value is 
  not defined by the enum. So if the list of allowable values
  was extended and the enum does not match the value,
  an exception is thrown
#>

# convert the property to the enum **RemediationScheduleDay** 
[EnumRemediationScheduleDay]$rawValue 

# get a comma-separated string:
[EnumRemediationScheduleDay]$rawValue -join ',' 
#endregion

#region using operator "-as"

<#
  Note: the operator "-as" accepts values not defined
  by the enum and returns $null instead of throwing
  an exception
#>

$rawValue -as [EnumRemediationScheduleDay]
#endregion

$ScanParameters_map = @{
      1 = 'Quick Scan'
      2 = 'Full Scan'
}

switch([int]$value)
{
  1          {'Quick Scan'}
  2          {'Full Scan'}
  default    {"$value"}
}

Enum EnumScanParameters
{
  Quick_Scan   = 1
  Full_Scan    = 2
}

<# 
  this example uses a hashtable to translate raw numeric values for 
  property "ScanParameters" to friendly text

  Note: to use other properties than "ScanParameters", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "ScanParameters" 
# to translate other properties, use their translation table instead
$ScanParameters_map = @{
      1 = 'Quick Scan'
      2 = 'Full Scan'
}

#endregion define hashtable

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "ScanParameters", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$ScanParameters = @{
  Name = 'ScanParameters'
  Expression = {
    # property is an array, so process all values
    $value = $_.ScanParameters
    $ScanParameters_map[[int]$value]
  }  
}
#endregion define calculated property

# retrieve the instances, and output the properties "Caption" and "ScanParameters". The latter
# is defined by the hashtable in $ScanParameters: 
Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -Property Caption, $ScanParameters

# ...or dump content of property ScanParameters:
$friendlyValues = Get-CimInstance -Class MSFT_MpPreference | 
    Select-Object -Property $ScanParameters |
    Select-Object -ExpandProperty ScanParameters

# output values
$friendlyValues

# output values as comma separated list
$friendlyValues -join ', '

# output values as bullet list
$friendlyValues | ForEach-Object { "- $_" }

<# 
  this example uses a hashtable to manually translate raw numeric values 
  for property "MSFT_MpPreference" to friendly text. This approach is ideal when
  there is just one instance to work with.

  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MSFT_MpPreference" 
# to translate other properties, use their translation table instead
$ScanParameters_map = @{
      1 = 'Quick Scan'
      2 = 'Full Scan'
}

#endregion define hashtable

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to illustrate
  the number-to-text translation. To process all instances, replace
  "Select-Object -First 1" with a "Foreach-Object" loop, and use
  the iterator variable $_ instead of $instance
#>

# query the property
$rawValue = $instance.ScanParameters  

# translate raw value to friendly text:
$friendlyName = $ScanParameters_map[[int]$rawValue]

# output value
$friendlyName

<# 
  this example uses a switch clause to translate raw numeric 
  values for property "ScanParameters" to friendly text. The switch
  clause is embedded into a calculated property so there is
  no need to refer to external variables for translation.

  Note: to use other properties than "ScanParameters", look up the appropriate 
  translation switch clause for the property you would like to use instead.
#>

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "ScanParameters", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$ScanParameters = @{
  Name = 'ScanParameters'
  Expression = {
    # property is an array, so process all values
    $value = $_.ScanParameters
    
    switch([int]$value)
      {
        1          {'Quick Scan'}
        2          {'Full Scan'}
        default    {"$value"}
      }
      
  }  
}
#endregion define calculated property

# retrieve all instances...
Get-CimInstance -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender | 
  # ...and output properties "Caption" and "ScanParameters". The latter is defined
  # by the hashtable in $ScanParameters:
  Select-Object -Property Caption, $ScanParameters

<# 
  this example translates raw values by means of type conversion
  the friendly names are defined as enumeration using the
  keyword "enum" (PowerShell 5 or better)
  
  The raw value(s) are translated to friendly text by 
  simply converting them into the enum type.
  
  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  enum definition for the property you would like to use instead.
#>


#region define enum with value-to-text translation:
Enum EnumScanParameters
{
  Quick_Scan   = 1
  Full_Scan    = 2
}

#endregion define enum

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to focus on
  the number-to-text type conversion. 
  
  To process all instances, replace   "Select-Object -First 1" 
  with a "Foreach-Object" loop, and use the iterator variable 
  $_ instead of $instance
#>

# query the property:
$rawValue = $instance.ScanParameters

#region using strict type conversion

<#
  Note: strict type conversion fails if the raw value is 
  not defined by the enum. So if the list of allowable values
  was extended and the enum does not match the value,
  an exception is thrown
#>

# convert the property to the enum **ScanParameters** 
[EnumScanParameters]$rawValue 

# get a comma-separated string:
[EnumScanParameters]$rawValue -join ',' 
#endregion

#region using operator "-as"

<#
  Note: the operator "-as" accepts values not defined
  by the enum and returns $null instead of throwing
  an exception
#>

$rawValue -as [EnumScanParameters]
#endregion

$ScanScheduleDay_map = @{
      0 = 'Every Day'
      1 = 'Sunday'
      2 = 'Monday'
      3 = 'Tuesday'
      4 = 'Wednesday'
      5 = 'Thursday'
      6 = 'Friday'
      7 = 'Saturday'
      8 = 'Never'
}

switch([int]$value)
{
  0          {'Every Day'}
  1          {'Sunday'}
  2          {'Monday'}
  3          {'Tuesday'}
  4          {'Wednesday'}
  5          {'Thursday'}
  6          {'Friday'}
  7          {'Saturday'}
  8          {'Never'}
  default    {"$value"}
}

Enum EnumScanScheduleDay
{
  Every_Day   = 0
  Sunday      = 1
  Monday      = 2
  Tuesday     = 3
  Wednesday   = 4
  Thursday    = 5
  Friday      = 6
  Saturday    = 7
  Never       = 8
}

<# 
  this example uses a hashtable to translate raw numeric values for 
  property "ScanScheduleDay" to friendly text

  Note: to use other properties than "ScanScheduleDay", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "ScanScheduleDay" 
# to translate other properties, use their translation table instead
$ScanScheduleDay_map = @{
      0 = 'Every Day'
      1 = 'Sunday'
      2 = 'Monday'
      3 = 'Tuesday'
      4 = 'Wednesday'
      5 = 'Thursday'
      6 = 'Friday'
      7 = 'Saturday'
      8 = 'Never'
}

#endregion define hashtable

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "ScanScheduleDay", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$ScanScheduleDay = @{
  Name = 'ScanScheduleDay'
  Expression = {
    # property is an array, so process all values
    $value = $_.ScanScheduleDay
    $ScanScheduleDay_map[[int]$value]
  }  
}
#endregion define calculated property

# retrieve the instances, and output the properties "Caption" and "ScanScheduleDay". The latter
# is defined by the hashtable in $ScanScheduleDay: 
Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -Property Caption, $ScanScheduleDay

# ...or dump content of property ScanScheduleDay:
$friendlyValues = Get-CimInstance -Class MSFT_MpPreference | 
    Select-Object -Property $ScanScheduleDay |
    Select-Object -ExpandProperty ScanScheduleDay

# output values
$friendlyValues

# output values as comma separated list
$friendlyValues -join ', '

# output values as bullet list
$friendlyValues | ForEach-Object { "- $_" }

<# 
  this example uses a hashtable to manually translate raw numeric values 
  for property "MSFT_MpPreference" to friendly text. This approach is ideal when
  there is just one instance to work with.

  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MSFT_MpPreference" 
# to translate other properties, use their translation table instead
$ScanScheduleDay_map = @{
      0 = 'Every Day'
      1 = 'Sunday'
      2 = 'Monday'
      3 = 'Tuesday'
      4 = 'Wednesday'
      5 = 'Thursday'
      6 = 'Friday'
      7 = 'Saturday'
      8 = 'Never'
}

#endregion define hashtable

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to illustrate
  the number-to-text translation. To process all instances, replace
  "Select-Object -First 1" with a "Foreach-Object" loop, and use
  the iterator variable $_ instead of $instance
#>

# query the property
$rawValue = $instance.ScanScheduleDay  

# translate raw value to friendly text:
$friendlyName = $ScanScheduleDay_map[[int]$rawValue]

# output value
$friendlyName

<# 
  this example uses a switch clause to translate raw numeric 
  values for property "ScanScheduleDay" to friendly text. The switch
  clause is embedded into a calculated property so there is
  no need to refer to external variables for translation.

  Note: to use other properties than "ScanScheduleDay", look up the appropriate 
  translation switch clause for the property you would like to use instead.
#>

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "ScanScheduleDay", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$ScanScheduleDay = @{
  Name = 'ScanScheduleDay'
  Expression = {
    # property is an array, so process all values
    $value = $_.ScanScheduleDay
    
    switch([int]$value)
      {
        0          {'Every Day'}
        1          {'Sunday'}
        2          {'Monday'}
        3          {'Tuesday'}
        4          {'Wednesday'}
        5          {'Thursday'}
        6          {'Friday'}
        7          {'Saturday'}
        8          {'Never'}
        default    {"$value"}
      }
      
  }  
}
#endregion define calculated property

# retrieve all instances...
Get-CimInstance -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender | 
  # ...and output properties "Caption" and "ScanScheduleDay". The latter is defined
  # by the hashtable in $ScanScheduleDay:
  Select-Object -Property Caption, $ScanScheduleDay

<# 
  this example translates raw values by means of type conversion
  the friendly names are defined as enumeration using the
  keyword "enum" (PowerShell 5 or better)
  
  The raw value(s) are translated to friendly text by 
  simply converting them into the enum type.
  
  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  enum definition for the property you would like to use instead.
#>


#region define enum with value-to-text translation:
Enum EnumScanScheduleDay
{
  Every_Day   = 0
  Sunday      = 1
  Monday      = 2
  Tuesday     = 3
  Wednesday   = 4
  Thursday    = 5
  Friday      = 6
  Saturday    = 7
  Never       = 8
}

#endregion define enum

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to focus on
  the number-to-text type conversion. 
  
  To process all instances, replace   "Select-Object -First 1" 
  with a "Foreach-Object" loop, and use the iterator variable 
  $_ instead of $instance
#>

# query the property:
$rawValue = $instance.ScanScheduleDay

#region using strict type conversion

<#
  Note: strict type conversion fails if the raw value is 
  not defined by the enum. So if the list of allowable values
  was extended and the enum does not match the value,
  an exception is thrown
#>

# convert the property to the enum **ScanScheduleDay** 
[EnumScanScheduleDay]$rawValue 

# get a comma-separated string:
[EnumScanScheduleDay]$rawValue -join ',' 
#endregion

#region using operator "-as"

<#
  Note: the operator "-as" accepts values not defined
  by the enum and returns $null instead of throwing
  an exception
#>

$rawValue -as [EnumScanScheduleDay]
#endregion

$SevereThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

switch([int]$value)
{
  1          {'Clean'}
  2          {'Quarantine'}
  3          {'Remove'}
  6          {'Allow'}
  8          {'UserDefined'}
  9          {'NoAction'}
  10         {'Block'}
  default    {"$value"}
}

Enum EnumSevereThreatDefaultAction
{
  Clean         = 1
  Quarantine    = 2
  Remove        = 3
  Allow         = 6
  UserDefined   = 8
  NoAction      = 9
  Block         = 10
}

<# 
  this example uses a hashtable to translate raw numeric values for 
  property "SevereThreatDefaultAction" to friendly text

  Note: to use other properties than "SevereThreatDefaultAction", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "SevereThreatDefaultAction" 
# to translate other properties, use their translation table instead
$SevereThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

#endregion define hashtable

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "SevereThreatDefaultAction", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$SevereThreatDefaultAction = @{
  Name = 'SevereThreatDefaultAction'
  Expression = {
    # property is an array, so process all values
    $value = $_.SevereThreatDefaultAction
    $SevereThreatDefaultAction_map[[int]$value]
  }  
}
#endregion define calculated property

# retrieve the instances, and output the properties "Caption" and "SevereThreatDefaultAction". The latter
# is defined by the hashtable in $SevereThreatDefaultAction: 
Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -Property Caption, $SevereThreatDefaultAction

# ...or dump content of property SevereThreatDefaultAction:
$friendlyValues = Get-CimInstance -Class MSFT_MpPreference | 
    Select-Object -Property $SevereThreatDefaultAction |
    Select-Object -ExpandProperty SevereThreatDefaultAction

# output values
$friendlyValues

# output values as comma separated list
$friendlyValues -join ', '

# output values as bullet list
$friendlyValues | ForEach-Object { "- $_" }

<# 
  this example uses a hashtable to manually translate raw numeric values 
  for property "MSFT_MpPreference" to friendly text. This approach is ideal when
  there is just one instance to work with.

  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  translation hashtable for the property you would like to use instead.
#>

#region define hashtable to translate raw values to friendly text

# Please note: this hashtable is specific for property "MSFT_MpPreference" 
# to translate other properties, use their translation table instead
$SevereThreatDefaultAction_map = @{
      1 = 'Clean'
      2 = 'Quarantine'
      3 = 'Remove'
      6 = 'Allow'
      8 = 'UserDefined'
      9 = 'NoAction'
     10 = 'Block'
}

#endregion define hashtable

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to illustrate
  the number-to-text translation. To process all instances, replace
  "Select-Object -First 1" with a "Foreach-Object" loop, and use
  the iterator variable $_ instead of $instance
#>

# query the property
$rawValue = $instance.SevereThreatDefaultAction  

# translate raw value to friendly text:
$friendlyName = $SevereThreatDefaultAction_map[[int]$rawValue]

# output value
$friendlyName

<# 
  this example uses a switch clause to translate raw numeric 
  values for property "SevereThreatDefaultAction" to friendly text. The switch
  clause is embedded into a calculated property so there is
  no need to refer to external variables for translation.

  Note: to use other properties than "SevereThreatDefaultAction", look up the appropriate 
  translation switch clause for the property you would like to use instead.
#>

#region define calculated property (to be used with Select-Object)

<#
  a calculated property is defined by a hashtable with keys "Name" and "Expression"
  "Name" defines the name of the property (in this example, it is "SevereThreatDefaultAction", but you can rename it to anything else)
  "Expression" defines a scriptblock that calculates the content of this property
  in this example, the scriptblock uses the hashtable defined earlier to translate each numeric
  value to its friendly text counterpart:
#>
 
$SevereThreatDefaultAction = @{
  Name = 'SevereThreatDefaultAction'
  Expression = {
    # property is an array, so process all values
    $value = $_.SevereThreatDefaultAction
    
    switch([int]$value)
      {
        1          {'Clean'}
        2          {'Quarantine'}
        3          {'Remove'}
        6          {'Allow'}
        8          {'UserDefined'}
        9          {'NoAction'}
        10         {'Block'}
        default    {"$value"}
      }
      
  }  
}
#endregion define calculated property

# retrieve all instances...
Get-CimInstance -ClassName MSFT_MpPreference -Namespace root/microsoft/windows/defender | 
  # ...and output properties "Caption" and "SevereThreatDefaultAction". The latter is defined
  # by the hashtable in $SevereThreatDefaultAction:
  Select-Object -Property Caption, $SevereThreatDefaultAction

<# 
  this example translates raw values by means of type conversion
  the friendly names are defined as enumeration using the
  keyword "enum" (PowerShell 5 or better)
  
  The raw value(s) are translated to friendly text by 
  simply converting them into the enum type.
  
  Note: to use other properties than "MSFT_MpPreference", look up the appropriate 
  enum definition for the property you would like to use instead.
#>


#region define enum with value-to-text translation:
Enum EnumSevereThreatDefaultAction
{
  Clean         = 1
  Quarantine    = 2
  Remove        = 3
  Allow         = 6
  UserDefined   = 8
  NoAction      = 9
  Block         = 10
}

#endregion define enum

# get one instance:
$instance = Get-CimInstance -Class MSFT_MpPreference -Namespace root/microsoft/windows/defender | Select-Object -First 1

<#
  IMPORTANT: this example processes only one instance to focus on
  the number-to-text type conversion. 
  
  To process all instances, replace   "Select-Object -First 1" 
  with a "Foreach-Object" loop, and use the iterator variable 
  $_ instead of $instance
#>

# query the property:
$rawValue = $instance.SevereThreatDefaultAction

#region using strict type conversion

<#
  Note: strict type conversion fails if the raw value is 
  not defined by the enum. So if the list of allowable values
  was extended and the enum does not match the value,
  an exception is thrown
#>

# convert the property to the enum **SevereThreatDefaultAction** 
[EnumSevereThreatDefaultAction]$rawValue 

# get a comma-separated string:
[EnumSevereThreatDefaultAction]$rawValue -join ',' 
#endregion

#region using operator "-as"

<#
  Note: the operator "-as" accepts values not defined
  by the enum and returns $null instead of throwing
  an exception
#>

$rawValue -as [EnumSevereThreatDefaultAction]
#endregion