mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-06-12 22:24:56 +03:00
mukul975
27c6414ca5
Complete skill folder anatomy across all cybersecurity skills: - scripts/agent.py: 80-150 line Python agents using real libraries (impacket, boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.) - references/api-reference.md: real API documentation with method signatures - LICENSE: MIT license for all skill folders
2.4 KiB
2.4 KiB
API Reference: Implementing Passwordless Auth with Microsoft Entra
Libraries
msal (Microsoft Authentication Library)
- Install:
pip install msal - Docs: https://msal-python.readthedocs.io/
ConfidentialClientApplication()-- App registration authacquire_token_for_client()-- Client credentials flow
Microsoft Graph API
- Base:
https://graph.microsoft.com/v1.0and/beta - Docs: https://learn.microsoft.com/en-us/graph/api/overview
Authentication Methods Policy API
| Endpoint | Description |
|---|---|
GET /policies/authenticationMethodsPolicy |
Full auth methods config |
GET /users/{id}/authentication/methods |
User's registered methods |
GET /users/{id}/authentication/fido2Methods |
FIDO2 keys for user |
GET /users/{id}/authentication/microsoftAuthenticatorMethods |
Authenticator setup |
GET /users/{id}/authentication/windowsHelloForBusinessMethods |
WHfB status |
Conditional Access API
| Endpoint | Description |
|---|---|
GET /identity/conditionalAccess/policies |
List CA policies |
GET /identity/conditionalAccess/authenticationStrength/policies |
Auth strength policies |
Sign-In Logs API
| Endpoint | Description |
|---|---|
GET /auditLogs/signIns |
Sign-in activity logs |
Filter: authenticationDetails/any(a:a/authenticationMethod eq 'FIDO2 security key') |
Authentication Method Types
fido2AuthenticationMethod-- FIDO2 security keysmicrosoftAuthenticatorAuthenticationMethod-- Authenticator appwindowsHelloForBusinessAuthenticationMethod-- Windows HellopasswordAuthenticationMethod-- Traditional passwordphoneAuthenticationMethod-- SMS/phone call (legacy)emailAuthenticationMethod-- Email OTP
Required Graph Permissions
UserAuthenticationMethod.Read.AllPolicy.Read.AllAuditLog.Read.AllUser.Read.All
External References
- Entra Passwordless: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-passwordless
- FIDO2 Keys: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-passwordless-security-key
- Graph Auth Methods: https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethods-overview
- Conditional Access Auth Strength: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-strengths