Skill UI

This skill utilizes the Microsoft Graph API to parse Office 365 Unified Audit Logs for security incident investigation. It is designed to detect critical indicators of account compromise, including the creation of suspicious email forwarding rules, unauthorized mailbox delegation changes, suspicious OAuth application consent grants, and other signs related to Business Email Compromise (BEC).

This script provides a comprehensive security assessment of Microsoft Entra ID (Azure AD) identity configurations. It audits for risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using PowerShell and Graph API. Ideal for compliance audits, security posture review, and post-merger security assessments.

This skill analyzes Azure AD/Microsoft Entra ID environments to detect illicit OAuth application consent grants. It leverages the Microsoft Graph API and directory audit logs to enumerate permissions, identify overly broad scopes, and flag high-risk applications based on publisher verification status. It is essential for SOC analysts and threat hunters investigating cloud identity security incidents.

Configure Azure AD Privileged Identity Management via Microsoft Graph API to enumerate eligible and active assignments, request just-in-time activations, audit logs, and enforce MFA or approval policies for zero-trust privileged access scenarios.

This guide details the process of creating and managing 'Agent Users' within Microsoft Entra ID. Agent Users are specialized identities that allow AI agents to function as digital workers, giving them user-level capabilities (e.g., accessing Exchange mailboxes or Teams) while maintaining robust security boundaries. It covers using the Microsoft Graph API and PowerShell to provision and configure these agents.

A comprehensive guide and implementation pattern for querying, searching, and paginating OneNote content using the Microsoft Graph API. This skill addresses the limitations of the standard OneNote search endpoint, providing robust methods for cross-notebook querying, advanced OData filtering on metadata, and client-side full-text indexing for body content. Ideal for building complex knowledge retrieval systems that handle large, distributed result sets.

This bundle generates comprehensive diagnostic logs for troubleshooting OneNote Graph API issues. It captures critical data points—such as the `request-id`, `x-ms-ags-diagnostic` headers, full error bodies, and decoded JWT token claims—for both successful and failed API calls. Use it for self-diagnosis, verifying permissions, or preparing detailed support tickets for Microsoft support.

This skill provides a comprehensive guide and code examples for creating a complete OneNote structure (Notebook, Section, and Page) using the Microsoft Graph API. It specifically addresses the critical technical requirement that OneNote content must follow strict XHTML standards, detailing common HTML pitfalls (such as unclosed tags, unsupported attributes, and merge cell usage) that can lead to silent content corruption during API calls.

This skill establishes a local development loop for OneNote integrations. It uses Mock Service Workers (MSW) to intercept calls to the Microsoft Graph API, providing realistic, fixture-based responses (e.g., Notebooks, Sections, Pages). This allows developers to rapidly build and test OneNote features without needing live Azure credentials or worrying about rate limit restrictions during development cycles.

A comprehensive go/no-go checklist for deploying OneNote integrations using the Microsoft Graph API. It covers critical production failure points, including advanced authentication resilience (token caching, silent renewal), rate limit handling (exponential backoff, tenant-level tracking), and explicit error code management for robust deployment. Essential for launch reviews.

A comprehensive guide detailing the reference architecture for connecting to OneNote via the Microsoft Graph API. It covers the distinct API paths, permission models, and object hierarchies for personal (OneDrive), SharePoint, and Microsoft 365 Group notebooks, ensuring seamless design for multi-tenant, enterprise-level integrations.

This skill guides developers through critical breaking changes when upgrading OneNote integrations using the Microsoft Graph SDK. It details how to migrate from app-only to delegated authentication, replace decommissioned webhooks with polling, update deprecated search endpoints to OData filters, and upgrade the Graph SDK from v5 to v6. Essential for maintaining compatibility with modern Microsoft Graph APIs.