azure▌

Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation, token theft, and cross-tenant pivoting.

Conduct forensic investigations in cloud environments by collecting and analyzing logs, snapshots, and metadata from AWS, Azure, and GCP services.

Deploy static sites and serverless APIs to Azure with local development emulation and CLI automation. \n \n Provides local emulator ( swa start ) with API proxy, authentication simulation, and framework auto-detection for React, Vue, Angular, Next.js, and others \n Supports Azure Functions backends with Node.js, Python, and .NET runtimes; configure via staticwebapp.config.json for routes, auth rules, and headers \n Includes deployment workflow: swa init (auto-detects framework), swa build , swa

Recommend Azure VM sizes, scale sets, and configurations based on workload requirements and budget. \n \n Analyzes workload type, performance needs, scaling requirements, and cost to suggest 2–3 VM or VMSS options with trade-offs \n Verifies recommendations against live Microsoft documentation; falls back to reference files if fetch fails \n Queries the unauthenticated Azure Retail Prices API for current pricing without requiring an Azure subscription \n Guides VM vs VMSS decision through a deci

Systematic diagnosis and remediation for Azure production issues using AppLens, Azure Monitor, and resource health checks. \n \n Covers Container Apps, Function Apps, and AKS clusters with service-specific troubleshooting guides for image pulls, cold starts, health probes, invocation failures, and node/pod issues \n Includes AppLens MCP integration for AI-powered root cause analysis and Azure Monitor MCP for KQL-based log and metric queries \n Provides a five-step diagnostic flow: identify sympt

Fast discovery and inventory of Azure resources across subscriptions using Resource Graph queries. \n \n Queries any Azure resource type (VMs, storage accounts, web apps, container apps, Key Vaults, etc.) across subscriptions and resource groups in a single command \n Supports cross-cutting searches for orphaned resources, missing tags, unhealthy states, and resource inventory counts \n Routes single-resource-type queries to dedicated MCP tools when available; falls back to Azure Resource Graph

Access Azure AI Search, Speech, OpenAI, and Document Intelligence services through unified MCP tools. \n \n AI Search supports full-text, vector, hybrid, and semantic search with built-in AI enrichment for entity extraction and OCR \n Speech service handles real-time and batch speech-to-text transcription, text-to-speech synthesis with neural voices, and speaker diarization \n MCP tools provide direct access: azure__search for index queries and azure__speech for transcription and synthesis \n SD

Azure compliance scanning, Key Vault expiration auditing, and resource configuration validation. \n \n Runs azqr (Azure Quick Review) for comprehensive compliance assessment against best practices across subscriptions and resource groups \n Monitors Key Vault keys, secrets, and certificates for expiration dates and identifies items without expiration policies \n Detects orphaned, misconfigured, and non-compliant resources using Resource Graph queries \n Classifies findings by priority (Critical,

Build and deploy GitHub Copilot SDK applications to Azure with flexible model configuration. \n \n Three scaffolding paths: create new greenfield projects, add SDK services to existing repos, or deploy existing SDK apps with Azure infrastructure \n Supports three model configurations: GitHub's default models, specific GitHub models via discovery, or bring-your-own-model (BYOM) on Azure with DefaultAzureCredential authentication \n Template includes Express/TypeScript API, React/Vite frontend, Bi

Unified access to Azure blob storage, file shares, queues, tables, and data lake services. \n \n Supports five storage service types: Blob Storage for objects and backups, File Shares for SMB access, Queue Storage for async messaging, Table Storage for NoSQL key-value data, and Data Lake for big data analytics \n MCP server tools enable listing storage accounts, containers, and blobs, plus downloading and uploading blob content directly \n Configurable access tiers (hot, cool, cold, archive) and