Skill v1.0.2
currentAutomated scan100/100~1 modified
version: "1.0.2" name: azure-external-attack-surface-management description: Expert knowledge for Azure External Attack Surface Management development including limits & quotas, and configuration. Use when tuning EASM inventory filters, interpreting asset metadata, automating exports to Log Analytics/ADX, or estimating billable assets, and other Azure External Attack Surface Management related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel), Azure Firewall Manager (use azure-firewall-manager). compatibility: Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation. metadata: generated_at: "2026-06-28" generator: "docs2skills/1.0.0"
Azure External Attack Surface Management Skill
This skill provides expert guidance for Azure External Attack Surface Management. Covers limits & quotas, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.
How to Use This Skill
IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g.,L35-L120), useread_filewith the specified lines. For categories with file links (e.g.,[security.md](security.md)), useread_fileon the linked reference file
IMPORTANT for Agent: Ifmetadata.generated_atis more than 3 months old, suggest the user pull the latest version from the repository. Ifmcp_microsoftdocstools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
- Preferred: Use
mcp_microsoftdocs:microsoft_docs_fetchwith query stringfrom=learn-agent-skill. Returns Markdown. - Fallback: Use
fetch_webpagewith query stringfrom=learn-agent-skill&accept=text/markdown. Returns Markdown.
Category Index
| Category | Lines | Description | |
|---|---|---|---|
| Limits & Quotas | L30-L34 | Explains how Defender EASM counts billable assets, what qualifies as a billable asset, and how those counts impact licensing and costs. | |
| Configuration | L35-L49 | Configuring Defender EASM inventory filters (domains, hosts, IPs, ASNs, SSL, pages, contacts), understanding asset metadata, and wiring data/policy automation to Log Analytics/ADX. |
Limits & Quotas
| Topic | URL | |
|---|---|---|
| Understand Defender EASM billable asset counts | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/understanding-billable-assets |
Configuration
| Topic | URL | |
|---|---|---|
| Filter ASN assets in Defender EASM inventory | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/asn-asset-filters | |
| Configure contact asset filters in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/contact-asset-filters | |
| Configure Defender EASM data connections to Log Analytics and ADX | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/data-connections | |
| Apply domain-specific filters in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/domain-asset-filters | |
| Use host asset filters in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/host-asset-filters | |
| Use Defender EASM inventory filter parameters | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/inventory-filters | |
| Filter IP address assets in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-address-asset-filters | |
| Filter IP block assets in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-block-asset-filters | |
| Configure page asset filters in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/page-asset-filters | |
| Configure Defender EASM policy engine automation | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/policy-engine | |
| Filter SSL certificate assets in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ssl-certificate-asset-filters | |
| Interpret Defender EASM asset metadata fields | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/understanding-asset-details |