It will take parameters for number of days, weeks, months, or years that you want to go back in time. It will take that and pull all devices that have not logged into AD since that time and remove them from AD and SCCM. There is also a parameter for search base, which is the OU of AD that you want to look in. It includes all of the same help items as well.

Cybersecurity
Microsoft Defender Is Now Being Used Against You. Three Zero-Days, Two Still Unpatched
The software sitting on your endpoint right now, the one you have trusted for years to catch threats before they cause damage, is currently the attack surface. Three zero-day exploits targeting Microsoft Defender were publicly dropped




