{"files":{"SKILL.md":"---\nname: microsoft-defender-for-cloud\ndescription: \"Microsoft Defender for Cloud API skill. Use when working with Microsoft Defender for Cloud for {scope}, {resourceId}. Covers 4 endpoints.\"\nversion: 1.0.0\ngenerator: lapsh\n---\n\n# Microsoft Defender for Cloud\nAPI version: 2020-01-01\n\n## Auth\nOAuth2\n\n## Base URL\nhttps://management.azure.com\n\n## Setup\n1. Configure auth: OAuth2\n2. GET /{scope}/providers/Microsoft.Security/assessments -- get security assessments on all your scanned resources inside a scope\n3. Explore available endpoints below\n\n## Endpoints\n4 endpoints across 2 groups. See references/api-spec.lap for full details.\n\n### {scope}\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /{scope}/providers/Microsoft.Security/assessments | Get security assessments on all your scanned resources inside a scope |\n\n### {resourceId}\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /{resourceId}/providers/Microsoft.Security/assessments/{assessmentName} | Get a security assessment on your scanned resource |\n| PUT | /{resourceId}/providers/Microsoft.Security/assessments/{assessmentName} | Create a security assessment on your resource. An assessment metadata that describes this assessment must be predefined with the same name before inserting the assessment result |\n| DELETE | /{resourceId}/providers/Microsoft.Security/assessments/{assessmentName} | Delete a security assessment on your resource. An assessment metadata that describes this assessment must be predefined with the same name before inserting the assessment result |\n\n## Common Questions\nMatch user requests to endpoints in references/api-spec.lap. Key patterns:\n- \"List all assessments?\" -> GET /{scope}/providers/Microsoft.Security/assessments\n- \"Get assessment details?\" -> GET /{resourceId}/providers/Microsoft.Security/assessments/{assessmentName}\n- \"Update a assessment?\" -> PUT /{resourceId}/providers/Microsoft.Security/assessments/{assessmentName}\n- \"Delete a assessment?\" -> DELETE /{resourceId}/providers/Microsoft.Security/assessments/{assessmentName}\n- \"How to authenticate?\" -> See Auth section above\n\n## Response Tips\n- Check response schemas in references/api-spec.lap for field details\n- Create/update endpoints return the modified resource on success\n\n## References\n- Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas\n\n> Generated from the official API spec by [LAP](https://lap.sh)\n","references/api-spec.lap":"@lap v0.3\n# Machine-readable API spec. Each @endpoint block is one API call.\n@api Microsoft Defender for Cloud\n@base https://management.azure.com\n@version 2020-01-01\n@auth OAuth2\n@endpoints 4\n@toc {scope}(1), {resourceId}(3)\n\n@group {scope}\n@endpoint GET /{scope}/providers/Microsoft.Security/assessments\n@desc Get security assessments on all your scanned resources inside a scope\n@returns(200) OK\n\n@endgroup\n\n@group {resourceId}\n@endpoint GET /{resourceId}/providers/Microsoft.Security/assessments/{assessmentName}\n@desc Get a security assessment on your scanned resource\n@required {assessmentName: any # The Assessment Key - Unique key for the assessment type}\n@optional {$expand: any # OData expand. Optional.}\n@returns(200) OK\n\n@endpoint PUT /{resourceId}/providers/Microsoft.Security/assessments/{assessmentName}\n@desc Create a security assessment on your resource. An assessment metadata that describes this assessment must be predefined with the same name before inserting the assessment result\n@required {assessmentName: any # The Assessment Key - Unique key for the assessment type, assessment: map # Calculated assessment on a pre-defined assessment metadata}\n@returns(200) OK - Updated\n@returns(201) Created\n\n@endpoint DELETE /{resourceId}/providers/Microsoft.Security/assessments/{assessmentName}\n@desc Delete a security assessment on your resource. An assessment metadata that describes this assessment must be predefined with the same name before inserting the assessment result\n@required {assessmentName: any # The Assessment Key - Unique key for the assessment type}\n@returns(200) OK - Assessment was deleted\n@returns(204) No Content - Assessment does not exist\n\n@endgroup\n\n@end\n"}}