Token导航 LogoToken导航TokenDH.com
云服务external-servicegithub未标认证来源可访问许可证需确认审计通过

azure-defender-for-iotAzure defender FOR IOT 部署

Agent Skill

用于辅助云资源、部署、容器、基础设施和运维自动化任务。它适合让 Agent 检查配置、整理部署步骤、分析资源状态、生成排障思路或辅助云服务接入。使用时需要明确目标环境、账号权限、区域和资源组,区分本地测试与生产操作;涉及删除资源、重启服务、修改网络或权限配置时,应先确认影响范围。

总安装

768

周安装

32

GitHub Stars

519

下载量

256
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:azure-defender-for-iot(Azure defender FOR IOT 部署)
来源仓库:https://github.com/microsoftdocs/agent-skills
仓库路径:skills/azure-defender-for-iot
安装命令:
npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-defender-for-iot
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-defender-for-iot

简介

提供 Azure Defender for IoT 的专业指导,涵盖故障排查、最佳实践和安全配置。

  • 适用于 IoT 安全架构设计、设备接入策略制定和威胁检测规则优化等场景。
  • 通过分类索引定位技术要点,结合本地文档与远程资料提供部署和集成建议。
  • 使用 read_file 工具按行号或文件链接获取特定技术细节,确保信息准确。
  • 涉及生产环境变更时需确认影响范围,避免误操作导致服务中断。

SKILL.md

Azure Defender For Iot Skill

This skill provides expert guidance for Azure Defender For Iot. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file
IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL37-L48Diagnosing and fixing Defender for IoT micro agent and OT sensor issues, understanding/handling security and health alerts, and validating sensor/agent installation and configuration.
Best PracticesL49-L56Best practices for securing IoT/OT with Defender for IoT: using hub security recommendations, CIS benchmark guidance, and planning OT monitoring topology and sensor placement.
Decision MakingL57-L68Guidance on planning Defender for IoT deployments: choosing OT traffic mirroring, appliances, licenses, partner integrations, billing, hybrid/air-gapped setups, and on-premises to cloud transitions.
Architecture & Design PatternsL69-L75Architectural guidance for connecting OT/ICS sensors to Azure, using sample OT network topologies, and aligning Defender for IoT deployment with Purdue model layers.
Limits & QuotasL76-L84Info on OT trial setup, supported/retiring features, appliance catalog and requirements, and Defender for IoT data retention and storage limits.
SecurityL85-L103Securing Defender for IoT OT environments: auth, RBAC/roles, SSO, certificates, Zero Trust, alert workflows/response, and auditing user and programming activity.
ConfigurationL104-L135Configuring Defender for IoT agents/sensors: micro agent twins, dependencies, alerts, OT sensor settings, traffic mirroring, connectivity, monitoring methods, and threat intel updates.
Integrations & Coding PatternsL136-L163Integrating Defender for IoT with SIEMs, firewalls, ServiceNow, Sentinel, OT sensors, and micro agents, plus using APIs, playbooks, and workbooks to automate alerts and manage inventory/vulnerabilities.
DeploymentL164-L187Planning and deploying Defender for IoT OT sensors: hardware/VM options, appliance-specific guides, traffic mirroring, onboarding, activation, and moving IoT security resources across regions.

Troubleshooting

Best Practices

Decision Making

Architecture & Design Patterns

Limits & Quotas

Security

TopicURL
Manage OT sensor authentication via Defender for IoT APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-auth-apis
Meet SSL/TLS certificate requirements for OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/certificate-requirements
Analyze OT programming events for suspicious changeshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-analyze-programming-details-changes
Manage Defender for IoT alerts in Azure portalhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-manage-cloud-alerts
View and manage OT sensor alerts locallyhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-view-alerts
Assign Azure RBAC roles for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/manage-users-portal
Manage on-premises users on OT network sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/manage-users-sensor
Apply Zero Trust monitoring to OT networkshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/monitor-zero-trust
Create CA-signed SSL/TLS certificates for OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/create-ssl-certificates
Use Defender for IoT security recommendations to reduce riskhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/recommendations
Investigate and respond to OT alerts in Azurehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/respond-ot-alert
Map Azure RBAC roles for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/roles-azure
Configure on-premises roles for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/roles-on-premises
Configure SSO for Defender for IoT sensor consolehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/set-up-sso
Audit user activity in Microsoft Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/track-user-activity

Configuration

TopicURL
Configure custom security alerts for Azure IoT Hubhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-customizable-security-alerts
Configure Defender for IoT micro agent behavior via module twinhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-micro-agent-configuration
Meet Linux dependency requirements for Defender micro agenthttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-micro-agent-linux-dependencies
Configure PAM on Linux to audit sign-in events for Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/configure-pam-to-audit-sign-in-events
Configure DMI decoder and alternatives for Defender micro agenthttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-configure-dmi-decoder
Configure Defender for IoT micro agent twin propertieshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-configure-micro-agent-twin
Configure Defender micro agent for Eclipse ThreadX deviceshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-threadx-security-module
Create and assign custom Defender for IoT device alertshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/quickstart-create-custom-alerts
Configure Microsoft Defender for IoT agent-based solutionhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/tutorial-configure-agent-based-solution
Create Defender for IoT micro agent module twinhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/tutorial-create-micro-agent-module-twin
Use Defender for IoT OT sensor CLI commandshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/cli-ot-sensor
Configure active monitoring methods for OT networkshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-active-monitoring
Set up reverse DNS lookup for OT active monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-reverse-dns-lookup
Configure OT sensor settings centrally from Azure portalhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-sensor-settings-portal
Configure Windows Endpoint Monitoring for OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-windows-endpoint-monitoring
Configure OT sensor proxy connectivity to Azurehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/connect-sensors
Use local script to enrich Windows endpoint datahttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/detect-windows-endpoints-script
Import supplemental OT device data into sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-import-device-information
Maintain individual OT sensors via sensor consolehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-manage-individual-sensors
Configure SNMP MIB monitoring for OT sensor healthhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-set-up-snmp-mib-monitoring
Manage threat intelligence package updates on OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-work-with-threat-intelligence-packages
Apply networking requirements for Defender for IoT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/networking-requirements
Allow OT sensor connectivity to Azure endpointshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/provision-cloud-management
Configure ERSPAN on Cisco for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-erspan
Configure ESXi vSwitch promiscuous mode for mirroringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-esxi
Configure Hyper-V vSwitch promiscuous mode for mirroringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-hyper-v
Configure Cisco RSPAN mirroring for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-rspan
Configure Cisco SPAN port mirroring for OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-span

Integrations & Coding Patterns

TopicURL
Provision Defender micro agent using IoT Hub DPS with X.509https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-provision-micro-agent
Use Defender micro agent API for Eclipse ThreadX integrationhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/threadx-security-module-api
Integrate OT sensor alert management APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-alert-apis
Integrate OT sensor inventory management APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-inventory-apis
Use OT sensor vulnerability management APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-vulnerability-apis
Automate sensor disconnection alerts with Sentinel playbookshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/automate-sensor-disconnection-alerts
Forward OT sensor alerts to partner systemshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-forward-alert-information-to-partners
Integrate Defender for IoT with ArcSight SIEMhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/arcsight
Send Defender for IoT alerts to LogRhythmhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/logrhythm
Send Defender for IoT alerts to RSA NetWitnesshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/netwitness
Connect on-premises Defender for IoT to Sentinel (legacy)https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/on-premises-sentinel
Stream Defender for IoT cloud alerts to external SIEMshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/send-cloud-data-to-partners
Configure legacy ServiceNow integration for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/service-now-legacy
Use Sentinel solution to detect IoT threatshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/iot-advanced-threat-monitoring
Connect Defender for IoT with Microsoft Sentinelhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/iot-solution
Access Defender for IoT data via REST APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/references-work-with-defender-for-iot-apis
Integrate CyberArk with Defender for IoT for credential securityhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-cyberark
Integrate Forescout with Microsoft Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-forescout
Integrate Fortinet firewalls with Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-fortinet
Integrate Palo Alto firewalls with Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-palo-alto
Integrate IBM QRadar with Defender for IoT alertshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-qradar
Integrate ServiceNow Operational Technology Manager with Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-servicenow
Integrate Splunk with Microsoft Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-splunk
Visualize Defender for IoT data with Azure workbookshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/workbooks

Deployment

TopicURL
Move Defender for IoT iotsecuritysolutions resource across regionshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-region-move
Select OT monitoring appliances for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/
Use Dell PowerEdge R350 for OT sensor deploymentshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/dell-poweredge-r350-e1800
Use Dell PowerEdge R360 for OT sensor deploymentshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/dell-poweredge-r360-e1800
Use Dell PowerEdge R660 for OT sensor deploymentshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/dell-poweredge-r660
Deploy Heptagon YB3x appliance for OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/heptagon-yb3x
Use HPE DL20 Gen 11 (4SFF) for SMB OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-gen-11
Use HPE DL20 Gen 11 (NHP 2LFF) for SMB/L500 OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-gen-11-nhp-2lff
Use legacy HPE DL20 Gen10 for enterprise OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-legacy
Use HPE DL20 Gen10 Plus for enterprise OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-plus-enterprise
Use HPE DL20 Gen10 Plus (NHP 2LFF) for SMB/L500 OThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-plus-smb
Deploy Defender for IoT on HPE ProLiant DL360https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl360
Deploy Defender for IoT on HPE ProLiant DL360 Gen 11https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl360-gen11
Deploy OT sensor as Hyper-V Gen 2 virtual appliancehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/virtual-sensor-hyper-v
Deploy OT sensor as VMware ESXi virtual appliancehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/virtual-sensor-vmware
Deploy YS-techsystems YS-FIT2 for OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/ys-techsystems-ys-fit2
Onboard OT sensors to Defender for IoT in Azurehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/onboard-sensors
Configure and activate Defender for IoT OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/activate-deploy-sensor
Install and initially configure OT sensor softwarehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/install-software-ot-sensor
Understand Defender for IoT OT deployment phaseshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/ot-deploy-path
Deploy OT sensor with correct traffic mirroringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/set-up-traffic-mirroring

适合场景

01

Azure 资源规划

02

云服务升级

03

基础设施检查

04

企业云环境自动化

能力概览

能力 1

整理 Azure 服务操作流程

能力 2

提示 CLI/MCP 前置条件

能力 3

辅助云资源检查和规划

能力 4

保留官方服务来源线索

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

35.79%
按下载量换算92

Claude

30.32%
按下载量换算78

Cursor

16.3%
按下载量换算42

Gemini CLI

8.9%
按下载量换算23

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

external-service

该 Skill 可能调用第三方服务、云服务或外部模型 API,使用前需要确认账号、额度、数据发送范围和服务条款。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills