Catalog
MicrosoftDocs/azure-external-attack-surface-management

MicrosoftDocs

azure-external-attack-surface-management

Expert knowledge for Azure External Attack Surface Management development including limits & quotas, and configuration. Use when defining EASM asset filters, building inventory queries, or managing billable asset usage and quotas, and other Azure External Attack Surface Management related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel), Azure Firewall Manager (use azure-firewall-manager).

v1.0Latest
New~998Updated Jun 26, 2026

Azure External Attack Surface Management Skill

This skill provides expert guidance for Azure External Attack Surface Management. Covers limits & quotas, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category Lines Description
Limits & Quotas L30-L34 Details on Defender EASM billable asset limits, how usage is measured, and how billing and quotas work for external attack surface management.
Configuration L35-L47 Configuring Defender EASM asset filters (domains, hosts, IPs, ASNs, SSL certs, pages, contacts), using inventory filters/saved queries, and connecting EASM data to Log Analytics/ADX.

Limits & Quotas

Topic URL
Understand Defender EASM billable asset limits and billing https://learn.microsoft.com/en-us/azure/external-attack-surface-management/understanding-billable-assets

Configuration

Topic URL
Configure ASN asset filters in Defender EASM https://learn.microsoft.com/en-us/azure/external-attack-surface-management/asn-asset-filters
Configure contact asset filters in Defender EASM https://learn.microsoft.com/en-us/azure/external-attack-surface-management/contact-asset-filters
Configure Defender EASM data connections to Log Analytics and ADX https://learn.microsoft.com/en-us/azure/external-attack-surface-management/data-connections
Configure domain asset filters in Defender EASM https://learn.microsoft.com/en-us/azure/external-attack-surface-management/domain-asset-filters
Configure host asset filters in Defender EASM https://learn.microsoft.com/en-us/azure/external-attack-surface-management/host-asset-filters
Use Defender EASM inventory filters and saved queries https://learn.microsoft.com/en-us/azure/external-attack-surface-management/inventory-filters
Configure IP address asset filters in Defender EASM https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-address-asset-filters
Configure IP block asset filters in Defender EASM https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-block-asset-filters
Configure page asset filters in Defender EASM https://learn.microsoft.com/en-us/azure/external-attack-surface-management/page-asset-filters
Configure SSL certificate asset filters in Defender EASM https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ssl-certificate-asset-filters
Files1
1 files · 18.2 KB

Select a file to preview

Overall Score

76/100

Grade

B

Good

Safety

82

Quality

72

Clarity

81

Completeness

65

Summary

This skill provides structured guidance for developing with Azure External Attack Surface Management (EASM), focusing on limits, quotas, and configuration tasks. It acts as a reference hub that directs agents to fetch remote documentation from Microsoft Learn and configure asset filters, inventory queries, and data connections.

Detected Capabilities

network requestremote documentation fetchread remote file

Trigger Keywords

Phrases that MCP clients use to match this skill to user intent.

easm asset filtersbillable assets quotadefender easm configurationexternal attack surfaceeasm inventory queries

Risk Signals

INFO

Requires network access to fetch remote documentation via mcp_microsoftdocs or fetch_webpage

Skill metadata, 'Compatibility' and 'How to Use' sections
INFO

Fallback to fetch_webpage with query parameters

How to Use This Skill section, fallback instructions
INFO

All referenced URLs are Microsoft Learn documentation (learn.microsoft.com)

Category Index tables, all topic URLs

Referenced Domains

External domains referenced in skill content, detected by static analysis.

github.comlearn.microsoft.com

Use Cases

  • Define EASM asset filters for domains, hosts, IPs, ASNs, SSL certificates, and pages
  • Build and manage inventory queries with saved filters in Defender EASM
  • Understand billable asset limits and quota management for EASM
  • Configure data connections from EASM to Log Analytics and Azure Data Explorer
  • Look up EASM configuration best practices and contact asset filter setup

Quality Notes

  • Clear categorization: skill partitions content into 'Limits & Quotas' and 'Configuration' with line-number references for local content
  • Well-structured table format for quick navigation: Category Index clearly shows topic, lines, and descriptions
  • Important agent notes are explicitly called out with IMPORTANT markers, guiding proper tool usage
  • Metadata check built in: skill instructs agents to verify documentation freshness (3-month check on generated_at)
  • Graceful fallback: dual tool support (preferred mcp_microsoftdocs and fallback fetch_webpage) reduces dependency failures
  • Scope clearly defined: description explicitly excludes related products (Defender For Cloud, Azure Security, Sentinel, Firewall Manager)
  • All topic URLs are hyperlinked and consistently formatted for easy reference
  • No example configurations or step-by-step workflows provided — skill is reference-oriented, not task-oriented
Model: claude-haiku-4-5-20251001Analyzed: Jun 26, 2026

Reviews

Add this skill to your library to leave a review.

No reviews yet

Be the first to share your experience.

Use MicrosoftDocs/azure-external-attack-surface-management in your dev environment

Command Palette

Search for a command to run...

MicrosoftDocs/azure-external-attack-surface-management | SkillRepo