mcpbeat

Azure External Attack Surface Management

microsoftdocs/azure-external-attack-surface-management

Expert knowledge for Azure External Attack Surface Management development including limits & quotas, and configuration. Use when tuning EASM inventory filters, interpreting asset metadata, automating exports to Log Analytics/ADX, or estimating billable assets, and other Azure External Attack Surface Management related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel), Azure Firewall Manager (use azure-firewall-manager).

1k tokens
context cost
the whole folder, loaded on every use
1
files
instructions only
0
copies elsewhere
how many repositories repackaged it
681
stars on the repo
on the repository, not the skill itself

Install

one command, takes just this skill from the repository 
npx skills add https://github.com/MicrosoftDocs/Agent-Skills --skill azure-external-attack-surface-management

The instruction itself

5 sections, as written by the author

Azure External Attack Surface Management Skill

This skill provides expert guidance for Azure External Attack Surface Management. Covers limits & quotas, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

> IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., security.md), use read_file on the linked reference file

> IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

| Category | Lines | Description |

|----------|-------|-------------|

| Limits & Quotas | L30-L34 | Explains how Defender EASM counts billable assets, what qualifies as a billable asset, and how those counts impact licensing and costs. |

| Configuration | L35-L49 | Configuring Defender EASM inventory filters (domains, hosts, IPs, ASNs, SSL, pages, contacts), understanding asset metadata, and wiring data/policy automation to Log Analytics/ADX. |

Limits & Quotas

| Topic | URL |

|-------|-----|

| Understand Defender EASM billable asset counts | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/understanding-billable-assets |

Configuration

| Topic | URL |

|-------|-----|

| Filter ASN assets in Defender EASM inventory | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/asn-asset-filters |

| Configure contact asset filters in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/contact-asset-filters |

| Configure Defender EASM data connections to Log Analytics and ADX | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/data-connections |

| Apply domain-specific filters in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/domain-asset-filters |

| Use host asset filters in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/host-asset-filters |

| Use Defender EASM inventory filter parameters | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/inventory-filters |

| Filter IP address assets in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-address-asset-filters |

| Filter IP block assets in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-block-asset-filters |

| Configure page asset filters in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/page-asset-filters |

| Configure Defender EASM policy engine automation | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/policy-engine |

| Filter SSL certificate assets in Defender EASM | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ssl-certificate-asset-filters |

| Interpret Defender EASM asset metadata fields | https://learn.microsoft.com/en-us/azure/external-attack-surface-management/understanding-asset-details |

How to use it

Copy the folder

Take microsoftdocs/azure-external-attack-surface-management from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.