Azure External Attack Surface Management Skill

SkillDatabases & data

Expert knowledge for Azure External Attack Surface Management development including configuration. Use when filtering EASM inventory by ASN, domains, hosts, IPs, pages, SSL certs, or exporting findings to analytics tools, and other Azure External Attack Surface Management related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel), Azure Networking (use azure-networking).

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the Azure External Attack Surface Management Skill skill

What this skill tells your AI

The instructions your AI receives, as published by microsoftdocs/agent-skills in skills/azure-external-attack-surface-management/SKILL.md and read by ahel’s review.

This skill provides expert guidance for Azure External Attack Surface Management. Covers configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
ConfigurationL29-L41Configuring and using Defender EASM inventory filters (ASN, domains, hosts, IPs/blocks, pages, SSL certs, contacts) and exporting EASM data to analytics tools.

Configuration

TopicURL
Filter ASN assets in Defender EASM inventoryhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/asn-asset-filters
Use contact asset filters in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/contact-asset-filters
Configure Defender EASM data exports to analyticshttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/data-connections
Configure Defender EASM domain asset filtershttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/domain-asset-filters
Apply host asset filters in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/host-asset-filters
Use Defender EASM inventory filters effectivelyhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/inventory-filters
Configure IP address filters in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-address-asset-filters
Filter IP block assets in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-block-asset-filters
Filter page assets in Defender EASM inventoryhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/page-asset-filters
Use SSL certificate asset filters in Defender EASMhttps://learn.microsoft.com/en-us/azure/external-attack-surface-management/ssl-certificate-asset-filters

Signals

GitHub stars
740
Forks
119
Last commit
Sep 2026

ahel review

  • S4info
    community integration — published by microsoftdocs, not azure

Automated review, not a security audit. Ruleset v1.

Advanced
Catalog kind
skill
Gateway key
azure-external-attack-surface-management
Source
github.com/microsoftdocs/agent-skills