安全
4,732 个结果
- Azure Enterprise Infra PlannerMicrosoft官方Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd).
- Azure KubernetesMicrosoft官方Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking options (private API server, Azure CNI Overlay, egress configuration), security, and operations (autoscaling, upgrade strategy, cost analysis).
- Entra App RegistrationMicrosoft官方Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication.
- Backlog TemplatesMicrosoft官方Shared work-item templates and conventions for ADO and GitHub backlog handoff across the RAI, Security, SSSC, Accessibility, and Privacy planners
- DocumentationMicrosoft官方Canonical documentation capability for audit, drift, validate, and author modes in hve-core.
- Git SetupMicrosoft官方Audit Git configuration with one read-only baseline command, then propose confirmed, non-destructive fixes for identity, editor, and diff and merge tooling, with signing and safe.directory help only on request. Use when setting up or checking Git on a workstation.
- Incident ResponseMicrosoft官方Run a structured Azure incident response workflow for triage, diagnosis, mitigation, and root cause analysis. Use when operations or security teams need guided incident handling for Azure service symptoms.
- McsbMicrosoft官方Microsoft Cloud Security Benchmark (MCSB v2) control-domain taxonomy and NIST 800-53 / CIS Controls crosswalk for planning and reviewing Azure cloud resources.
- Owasp AgenticMicrosoft官方OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
- Owasp CicdMicrosoft官方OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.
- Owasp DockerMicrosoft官方OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.
- Owasp InfrastructureMicrosoft官方OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
- Owasp LlmMicrosoft官方OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.
- Owasp MCPMicrosoft官方OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.
- Owasp Top 10Microsoft官方OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.
- Performance Slo PlannerMicrosoft官方Performance, load, and reliability (SLO/SRE) planning for production readiness. Use when defining service level objectives, load characterization, capacity, latency budgets, stress/soak/spike test plans, false-positive baselines, and reliability targets.
- Rai StandardsMicrosoft官方Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping
- Secure By DesignMicrosoft官方Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
- Security PlanningMicrosoft官方Security planning and plan-drift analysis for STRIDE, standards, controls, backlog handoff, current findings, and TM7 generation.
- Security Reviewer FormatsMicrosoft官方Format specifications and data contracts for the security reviewer orchestrator and its subagents.
- Supply Chain SecurityMicrosoft官方Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.
- Pr ReviewMicrosoft官方Multi-dimensional review of a PR or feature branch in the microsoft/winappcli repo. Activate when a contributor asks to "review my PR", "review my changes", "vet my branch before pushing", "do a full review", "PR review", "review this feature", or similar.
- Winui Code ReviewMicrosoft官方Review WinUI 3 code or changes for quality: MVVM, x:Bind correctness, accessibility, theming, security, performance, and WinUI analyzer findings. Use when asked to review or audit a WinUI app or its pending changes, or before committing. Catches issues the compiler and UI tests miss.
- Onelake Catalog Govern CliMicrosoft官方Governs Microsoft Fabric OneLake catalog health, protection, and trust through Fabric Admin, Core, and Power BI REST APIs. Use for tenant or owner-scoped audits and guarded remediation of domains, workspace assignment, capacity, labels, tags, descriptions, refresh, and item identity. Catalog item discovery belongs to search-consumption-cli.