azure-external-attack-surface-management

name	azure-external-attack-surface-management
description	Expert knowledge for Azure External Attack Surface Management development including configuration. Use when configuring asset filters, inventory queries, data connections, or policy automation in Defender EASM, and other Azure External Attack Surface Management related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Security (use azure-security), Azure Firewall (use azure-firewall), Azure Web Application Firewall (use azure-web-application-firewall).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-08-09","generator":"docs2skills/1.0.0"}

Azure External Attack Surface Management Skill

This skill provides expert guidance for Azure External Attack Surface Management. Covers configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Configuration	L29-L42	Configuring Defender EASM asset filters (domains, hosts, IPs, IP blocks, ASNs, pages, SSL certs, contacts), inventory filter parameters, data connections, and policy automation.

Configuration

Topic	URL
Filter ASN assets in Defender EASM inventory	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/asn-asset-filters
Configure contact asset filters in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/contact-asset-filters
Configure Defender EASM data connections to Log Analytics and ADX	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/data-connections
Apply domain-specific filters in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/domain-asset-filters
Use host asset filters in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/host-asset-filters
Use Defender EASM inventory filter parameters	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/inventory-filters
Filter IP address assets in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-address-asset-filters
Filter IP block assets in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/ip-block-asset-filters
Configure page asset filters in Defender EASM	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/page-asset-filters
Configure Defender EASM policy engine automation	https://learn.microsoft.com/en-us/azure/external-attack-surface-management/policy-engine