Azure external attack surface management

Skill MicrosoftDocs/Agent-Skills/skills/azure-external-attack-surface-management

Expert knowledge for Azure External Attack Surface Management development including limits & quotas, and configuration. Use when tuning EASM inventory filters, interpreting asset metadata, automating exports to Log Analytics/ADX, or estimating billable assets, and other Azure External Attack Surface Management related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel), Azure Firewall Manager (use azure-firewall-manager).From its SKILL.md

Install

npx -y skills add MicrosoftDocs/Agent-Skills --skill azure-external-attack-surface-management

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

4.4 KB, 815 tokens by cl100k_base, as published. Nobody here has run it

Azure External Attack Surface Management Skill

This skill provides expert guidance for Azure External Attack Surface Management. Covers limits & quotas, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Limits & Quotas	L30-L34	Explains how Defender EASM counts billable assets, what qualifies as a billable asset, and how those counts impact licensing and costs.
Configuration	L35-L49	Configuring Defender EASM inventory filters (domains, hosts, IPs, ASNs, SSL, pages, contacts), understanding asset metadata, and wiring data/policy automation to Log Analytics/ADX.

Limits & Quotas

Topic	URL
Understand Defender EASM billable asset counts	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/understanding-billable-assets

Configuration

Topic	URL
Filter ASN assets in Defender EASM inventory	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/asn-asset-filters
Configure contact asset filters in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/contact-asset-filters
Configure Defender EASM data connections to Log Analytics and ADX	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/data-connections
Apply domain-specific filters in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/domain-asset-filters
Use host asset filters in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/host-asset-filters
Use Defender EASM inventory filter parameters	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/inventory-filters
Filter IP address assets in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-address-asset-filters
Filter IP block assets in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-block-asset-filters
Configure page asset filters in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/page-asset-filters
Configure Defender EASM policy engine automation	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/policy-engine
Filter SSL certificate assets in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ssl-certificate-asset-filters
Interpret Defender EASM asset metadata fields	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/understanding-asset-details

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.