Skill UI

Configures Microsoft Defender for Endpoint advanced protections (ASR, controlled folder access, network and exploit settings) through PowerShell or Intune/SCCM policies to harden Windows endpoints and meet compliance expectations.

Defines a structured patch management workflow covering discovery, assessment, testing, approval, deployment, and verification so security teams can remediate vulnerabilities across Windows and Linux fleets using tools like WSUS, SCCM, Ansible, and reporting gates.

Automates prioritizing CVEs by risk, orchestrating patch and configuration changes through WSUS/SCCM/Intune, handling zero-day mitigations, and validating fixes to keep endpoints compliant with SLAs.