Skill UI

A sophisticated red-teaming tool for authorized security testing, simulating OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID. It demonstrates how attackers can bypass MFA and steal access and refresh tokens by tricking victims into authorizing access via the genuine Microsoft login page. Essential for validating Conditional Access and token protection controls.

This guide details using the comprehensive AADInternals PowerShell toolkit for defensive validation of Microsoft Entra ID, Azure AD, and AD FS environments. It covers unauthenticated tenant reconnaissance, acquiring access tokens for multiple Microsoft APIs, and critically, testing for federation backdoors (Golden SAML) by simulating advanced attack techniques (MITRE T1606.002). It is designed for authorized red-team assessments to map external attack surfaces and validate identity infrastructure hardening.

This skill provides advanced threat hunting queries for Microsoft Sentinel/Log Analytics. It detects the behavioral and string fingerprints left by popular offensive Entra ID enumeration tools (like ROADtools, AADInternals, and AzureHound) within both MicrosoftGraphActivityLogs and AADGraphActivityLogs. Use this when investigating suspicious Graph API activity, identifying internal reconnaissance, or building detection rules to surface active intrusions.

A comprehensive guide for threat hunters focusing on detecting stolen session cookies and OAuth/PRT token replay (T1550.001). This skill teaches correlation techniques across Microsoft Entra ID SigninLogs and Okta System Logs, enabling the detection of impossible travel, refresh-token reuse, and anomalous lateral movement within federated SaaS environments. Essential for post-phishing or post-compromise investigations.

GraphRunner is a powerful PowerShell toolset built on the Microsoft Graph API, designed for authorized red-teaming engagements against M365/Entra ID tenants. After obtaining a valid Graph token, it enables reconnaissance, establishes persistence (e.g., injecting OAuth apps and inbox rules), performs privilege escalation, and exfiltrates sensitive data from mailboxes, SharePoint, and Teams. Use only in authorized testing environments.

This skill manages Bing Webmaster Tools and IndexNow submissions to improve visibility on Bing, Amazon, and other search engines. It enables Microsoft Copilot citations by ensuring content is indexed in the Bing index. Useful for submitting URLs, comparing link data, and verifying IndexNow status for non-Google search surfaces.

This comprehensive guide serves as the final pre-submission checklist for authors submitting to The Art Bulletin. It details critical requirements for maintaining double-blind anonymity, proper file structure, and adherence to specific academic constraints, including word counts, citation styles (Chicago), and image handling. It ensures submissions are in the required Microsoft Word format, preventing common rejection triggers.

This comprehensive guide serves as the final pre-submission checklist for publishing in Critical Inquiry (CI). It details crucial, often overlooked requirements—such as adhering to strict word counts (including notes and bibliography), using Microsoft Word format, following Chicago 17th footnotes (no works-cited list), providing separate, high-resolution images, and confirming single-submission status. Using this checklist minimizes common publication errors before hitting 'submit' on Editorial Manager.

This skill converts Microsoft Word documents (.docx) into Markdown format. It is essential for accurately analyzing, summarizing, or extracting data from proprietary Word files, as direct parsing is unreliable. It supports single files, batch processing of folders, and is designed to coordinate with sibling skills (PDF and Excel) when handling mixed document types to ensure no data is skipped.

Build and evolve React/Next.js agentic web apps that pair CopilotKit with Microsoft Agent Framework agents hosted in Microsoft Foundry over the AG-UI protocol. Covers wiring choices, native Foundry primitives, tools, human-in-the-loop approvals, generative UI and shared state, local run, azd deployment, and event-stream debugging.

A comprehensive audit checklist designed for authors submitting data-engineering systems papers to major conferences like ICDE. It covers critical areas including IEEE formatting standards, round selection strategy, Microsoft CMT conflict declarations, and the requirement for supplemental material, ensuring authors mitigate common desk-reject risks.

A comprehensive audit guide for authors preparing submissions for the International Conference on Database Theory (ICDT). This guide covers critical aspects including selecting the correct submission cycle, adhering to the two-step abstract-then-paper deadline, meeting the LIPIcs formatting standards (15 pages excluding references), ensuring complete and verifiable proofs, and maintaining strict anonymity since 2024. Use this before uploading to Microsoft CMT.