Security & Testing Agent Skills for Microsoft Copilot

Discover and inventory shadow API endpoints that operate outside documented

This skill covers detecting sophisticated cyber-physical attacks that

Systematically remove malware, backdoors, and attacker persistence mechanisms

Evaluates and selects Threat Intelligence Platform (TIP) products based

Executes comprehensive red team exercises that simulate real-world adversary

Discover and exploit broken link hijacking vulnerabilities by identifying

Exploit Kerberos Constrained Delegation misconfigurations in Active Directory

Identifies and exploits IPv6-specific vulnerabilities including SLAAC

Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB,

Hardening Docker containers for production involves applying security

Hunt for malicious PowerShell activity by analyzing Script Block Logging

Hunt for data exfiltration through network traffic analysis, detecting

Detect data staging activity before exfiltration by monitoring for archive

Proactively hunt for adversary abuse of legitimate system binaries (LOLBins)

Hunt for registry-based persistence mechanisms including Run keys, Winlogon

Hunt for spearphishing campaign indicators across email logs, endpoint

Implement Cloud Security Posture Management using AWS Security Hub, Azure

Implements full disk encryption using Microsoft BitLocker on Windows

Implementing microsegmentation using Akamai Guardicore Segmentation

Deploy Mimecast Targeted Threat Protection including URL Protect, Attachment

Implement MITRE ATT&CK coverage mapping to identify detection gaps, prioritize