mcpField
A
azure-external-attack-surface-management

azure-external-attack-surface-management

github.com/microsoftdocsSecurity796150 installsUpdated 3d ago
Repository

About azure-external-attack-surface-management

azure-external-attack-surface-management is a configuration guidance skill for agents working with Azure External Attack Surface Management. It combines local references with remote documentation about Defender EASM inventory filters and data exports.

Key features

  1. 01Filter inventory by asset type
  2. 02Configure ASN and domain filters
  3. 03Filter host and IP assets
  4. 04Filter pages and SSL certificates
  5. 05Set up analytics data exports

Use cases

  1. 01Narrowing inventory to selected asset types
  2. 02Finding IP or host assets
  3. 03Filtering certificates and contact details
  4. 04Exporting EASM data to analytics tools

MCP support

The skill recommends fetching documentation with mcp_microsoftdocs:microsoft_docs_fetch, with fetch_webpage as a fallback.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-external-attack-surface-management

After installing, type/azure-external-attack-surface-managementin Claude Code to confirm it loaded.

Details

From the project README

Azure External Attack Surface Management Skill

This skill provides expert guidance for Azure External Attack Surface Management. Covers configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
ConfigurationL29-L41Configuring and using Defender EASM inventory filters (ASN, domains, hosts, IPs/blocks, pages, SSL certs, contacts) and exporting EASM data to analytics tools.
Configuration
TopicURL
Filter ASN assets in Defender EASM inventoryhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/asn-asset-filters
Use contact asset filters in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/contact-asset-filters
Configure Defender EASM data exports to analyticshttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/data-connections
Configure Defender EASM domain asset filtershttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/domain-asset-filters
Apply host asset filters in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/host-asset-filters
Use Defender EASM inventory filters effectivelyhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/inventory-filters
Configure IP address filters in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-address-asset-filters
Filter IP block assets in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-block-asset-filters
Filter page assets in Defender EASM inventoryhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/page-asset-filters
Use SSL certificate asset filters in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/ssl-certificate-asset-filters

Comments

Markdown supported