fix breach alert

track differences across days by using a single partition key

Author: JohnDuprey

Modules/CIPPCore/Public/Alerts/Get-CippAlertBreachAlert.ps1

@@ -12,7 +12,7 @@ function Get-CippAlertBreachAlert {
     )
     try {
         $Search = New-BreachTenantSearch -TenantFilter $TenantFilter
-        Write-AlertTrace -cmdletName $MyInvocation.MyCommand -tenantFilter $TenantFilter -data $Search
+        Write-AlertTrace -cmdletName $MyInvocation.MyCommand -tenantFilter $TenantFilter -data $Search -PartitionKey BreachAlert
     } catch {
         Write-AlertMessage -tenant $($TenantFilter) -message "Could not get New Breaches for $($TenantFilter): $(Get-NormalizedError -message $_.Exception.message)"
     }

Modules/CIPPCore/Public/GraphHelper/Write-AlertTrace.ps1

@@ -6,10 +6,10 @@ function Write-AlertTrace {
     param(
         $cmdletName,
         $data,
-        $tenantFilter
+        $tenantFilter,
+        [string]$PartitionKey = (Get-Date -UFormat '%Y%m%d').ToString()
     )
     $Table = Get-CIPPTable -tablename AlertLastRun
-    $PartitionKey = (Get-Date -UFormat '%Y%m%d').ToString()
     #Get current row and compare the $logData object. If it's the same, don't write it.
     $Row = Get-CIPPAzDataTableEntity @table -Filter "RowKey eq '$($tenantFilter)-$($cmdletName)' and PartitionKey eq '$PartitionKey'"
     try {