{"files":{"SKILL.md":"---\nname: microsoft-defender-for-cloud\ndescription: \"Microsoft Defender for Cloud API skill. Use when working with Microsoft Defender for Cloud for subscriptions. Covers 4 endpoints.\"\nversion: 1.0.0\ngenerator: lapsh\n---\n\n# Microsoft Defender for Cloud\nAPI version: 2015-06-01-preview\n\n## Auth\nOAuth2\n\n## Base URL\nhttps://management.azure.com\n\n## Setup\n1. Configure auth: OAuth2\n2. GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/applicationWhitelistings -- gets a list of application control vm/server groups for the subscription.\n3. Explore available endpoints below\n\n## Endpoints\n4 endpoints across 1 group. See references/api-spec.lap for full details.\n\n### Subscriptions\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /subscriptions/{subscriptionId}/providers/Microsoft.Security/applicationWhitelistings | Gets a list of application control VM/server groups for the subscription. |\n| GET | /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/applicationWhitelistings/{groupName} | Gets an application control VM/server group. |\n| PUT | /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/applicationWhitelistings/{groupName} | Update an application control VM/server group |\n| DELETE | /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/applicationWhitelistings/{groupName} | Delete an application control VM/server group |\n\n## Common Questions\nMatch user requests to endpoints in references/api-spec.lap. Key patterns:\n- \"List all applicationWhitelistings?\" -> GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/applicationWhitelistings\n- \"Get applicationWhitelisting details?\" -> GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/applicationWhitelistings/{groupName}\n- \"Update a applicationWhitelisting?\" -> PUT /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/applicationWhitelistings/{groupName}\n- \"Delete a applicationWhitelisting?\" -> DELETE /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/applicationWhitelistings/{groupName}\n- \"How to authenticate?\" -> See Auth section above\n\n## Response Tips\n- Check response schemas in references/api-spec.lap for field details\n- Create/update endpoints return the modified resource on success\n\n## References\n- Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas\n\n> Generated from the official API spec by [LAP](https://lap.sh)\n","references/api-spec.lap":"@lap v0.3\n# Machine-readable API spec. Each @endpoint block is one API call.\n@api Microsoft Defender for Cloud\n@base https://management.azure.com\n@version 2015-06-01-preview\n@auth OAuth2\n@endpoints 4\n@toc subscriptions(4)\n\n@endpoint GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/applicationWhitelistings\n@desc Gets a list of application control VM/server groups for the subscription.\n@optional {includePathRecommendations: any # Include the policy rules, summary: any # Return output in a summarized form}\n@returns(200) OK\n\n@endpoint GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/applicationWhitelistings/{groupName}\n@desc Gets an application control VM/server group.\n@required {groupName: any # Name of an application control VM/server group}\n@returns(200) OK\n\n@endpoint PUT /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/applicationWhitelistings/{groupName}\n@desc Update an application control VM/server group\n@required {groupName: any # Name of an application control VM/server group, body: map # The updated VM/server group data}\n@returns(200) OK\n\n@endpoint DELETE /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/applicationWhitelistings/{groupName}\n@desc Delete an application control VM/server group\n@required {groupName: any # Name of an application control VM/server group}\n@returns(200) OK - The response indicates that the delete operation completed successfully\n@returns(202) Accepted. The response indicates the delete operation is performed in the background.\n@returns(204) No Content. The response indicates the resource is already deleted.\n\n@end\n"}}