Files
Anthropic-Cybersecurity-Skills/skills/securing-azure-with-microsoft-defender/references/api-reference.md
T
mukul975 27c6414ca5 Add folder anatomy (scripts/agent.py + references/api-reference.md) for 648 cybersecurity skills
Complete skill folder anatomy across all cybersecurity skills:
- scripts/agent.py: 80-150 line Python agents using real libraries (impacket,
  boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.)
- references/api-reference.md: real API documentation with method signatures
- LICENSE: MIT license for all skill folders
2026-03-10 21:02:12 +01:00

2.0 KiB

API Reference: Securing Azure with Microsoft Defender

Azure CLI Security Commands

Defender Plans

az security pricing list                    # List all Defender plan statuses
az security pricing create --name <plan> --tier Standard  # Enable a plan

Secure Score

az security secure-score list               # Get current secure score
az security secure-score-controls list      # List score control categories

Assessments

az security assessment list                 # List all security assessments
az security assessment show --name <id>     # Get assessment details

Alerts

az security alert list                      # List active security alerts
az security alert update --name <id> --status Dismissed  # Update alert status

Security Contacts

az security contact create --name default --email soc@company.com --alert-notifications on

Azure Resource Graph (Attack Paths)

az graph query -q "securityresources | where type == 'microsoft.security/attackpaths'"

Defender Plan Names

Plan Name Protection Scope
VirtualMachines Servers (P1/P2)
Containers AKS, ACR, container runtime
StorageAccounts Blob, File, Queue storage
SqlServers Azure SQL Database
CosmosDbs Cosmos DB accounts
KeyVaults Key Vault operations
AppServices App Service/Functions
Dns DNS layer protection
Arm Azure Resource Manager

JIT VM Access

az security jit-policy create --resource-group <rg> --location <loc> --name default \
  --virtual-machines '[{"id": "<vm-resource-id>", "ports": [{"number": 22, ...}]}]'

References