[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6ED5JPM48D2J2K7E3STTXC4":3,"skill-same:01M6ED5JPM48D2J2K7E3STTXC4":49},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":22,"linkOnly":23,"markdownContent":24,"markdownBody":24,"frontMatter":25,"refName":26,"commitSha":27,"skillDirectory":28,"forksCount":29,"repositoryHtmlUrl":30,"repositoryHomepageUrl":31,"ownerHtmlUrl":32,"ownerBlogUrl":6,"ownerDescription":33,"updatedAt":34,"install":35,"resources":48},"01M6ED5JPM48D2J2K7E3STTXC4","azure-defender-for-iot",null,"ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FMicrosoftDocs\u002FAgent-Skills\u002Fazure-defender-for-iot\u002FSKILL.md",[],[18,19,20,21],"defender","azure","iot","azure defender for iot","2026-11-10 10:12:30",false,"# Azure Defender For Iot Skill\n\nThis skill provides expert guidance for Azure Defender For Iot. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https:\u002F\u002Fgithub.com\u002FMicrosoftDocs\u002Fmcp\u002Fblob\u002Fmain\u002FREADME.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text\u002Fmarkdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L37-L48 | Diagnosing and fixing Defender for IoT micro agent and OT sensor issues, understanding\u002Fhandling security and health alerts, and validating sensor\u002Fagent installation and configuration. |\n| Best Practices | L49-L56 | Best practices for securing IoT\u002FOT with Defender for IoT: using hub security recommendations, CIS benchmark guidance, and planning OT monitoring topology and sensor placement. |\n| Decision Making | L57-L68 | Guidance on planning Defender for IoT deployments: choosing OT traffic mirroring, appliances, licenses, partner integrations, billing, hybrid\u002Fair-gapped setups, and on-premises to cloud transitions. |\n| Architecture & Design Patterns | L69-L75 | Architectural guidance for connecting OT\u002FICS sensors to Azure, using sample OT network topologies, and aligning Defender for IoT deployment with Purdue model layers. |\n| Limits & Quotas | L76-L84 | Info on OT trial setup, supported\u002Fretiring features, appliance catalog and requirements, and Defender for IoT data retention and storage limits. |\n| Security | L85-L103 | Securing Defender for IoT OT environments: auth, RBAC\u002Froles, SSO, certificates, Zero Trust, alert workflows\u002Fresponse, and auditing user and programming activity. |\n| Configuration | L104-L135 | Configuring Defender for IoT agents\u002Fsensors: micro agent twins, dependencies, alerts, OT sensor settings, traffic mirroring, connectivity, monitoring methods, and threat intel updates. |\n| Integrations & Coding Patterns | L136-L163 | Integrating Defender for IoT with SIEMs, firewalls, ServiceNow, Sentinel, OT sensors, and micro agents, plus using APIs, playbooks, and workbooks to automate alerts and manage inventory\u002Fvulnerabilities. |\n| Deployment | L164-L187 | Planning and deploying Defender for IoT OT sensors: hardware\u002FVM options, appliance-specific guides, traffic mirroring, onboarding, activation, and moving IoT security resources across regions. |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Use Defender micro agent security alerts and remediation guidance | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fconcept-agent-based-security-alerts |\n| Use Defender for IoT Hub built-in and custom alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fconcept-security-alerts |\n| Use ThreadX Defender micro agent alerts and recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fconcept-threadx-security-alerts-recommendations |\n| Troubleshoot Microsoft Defender for IoT micro agent issues | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Ftroubleshoot-defender-micro-agent |\n| Investigate and remediate Defender for IoT security alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Ftutorial-investigate-security-alerts |\n| Troubleshoot Microsoft Defender for IoT OT sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fhow-to-troubleshoot-sensor |\n| Validate Defender for IoT OT sensor installation health | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-deploy\u002Fpost-install-validation-ot-software |\n| Interpret Defender for IoT sensor health messages | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fsensor-health-messages |\n\n### Best Practices\n| Topic | URL |\n|-------|-----|\n| Apply Defender for IoT Hub security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fconcept-recommendations |\n| Investigate CIS benchmark-based Defender recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fhow-to-investigate-cis-benchmark |\n| Plan OT monitoring topology with Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fbest-practices\u002Fplan-corporate-monitoring |\n| Prepare OT sites and sensor placement for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fbest-practices\u002Fplan-prepare-deploy |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Choose OT traffic mirroring methods for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fbest-practices\u002Ftraffic-mirroring-methods |\n| Decide on OT traffic mirroring methods for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fbest-practices\u002Ftraffic-mirroring-methods |\n| Plan Defender for IoT billing and licensing | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fbilling |\n| Choose and plan Defender for IoT partner integrations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fintegrate-overview |\n| Choose and extend Defender for IoT licenses | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Flicense-and-trial-license-extention |\n| Select appropriate OT appliances for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-appliance-sizing |\n| Plan hybrid or air-gapped Defender for IoT deployments | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-deploy\u002Fair-gapped-deploy |\n| Transition Defender for IoT from on-premises to cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-deploy\u002Ftransition-on-premises-management-console-to-cloud |\n\n### Architecture & Design Patterns\n| Topic | URL |\n|-------|-----|\n| Select architectures to connect OT sensors to Azure | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Farchitecture-connections |\n| Use sample OT network connectivity models for sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fbest-practices\u002Fsample-connectivity-models |\n| Map Defender for IoT to Purdue OT architecture | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fbest-practices\u002Funderstand-network-architecture |\n\n### Limits & Quotas\n| Topic | URL |\n|-------|-----|\n| Understand Defender for IoT feature support and retirement timelines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fedge-security-module-deprecation |\n| Set up Defender for IoT OT trial plan | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fgetting-started |\n| Review catalog of preconfigured OT monitoring appliances | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-pre-configured-appliances |\n| System requirements for Defender for IoT OT virtual appliances | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-virtual-appliances |\n| Understand Defender for IoT data retention limits | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Freferences-data-retention |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Manage OT sensor authentication via Defender for IoT APIs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fapi\u002Fsensor-auth-apis |\n| Meet SSL\u002FTLS certificate requirements for OT sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fbest-practices\u002Fcertificate-requirements |\n| Analyze OT programming events for suspicious changes | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fhow-to-analyze-programming-details-changes |\n| Manage Defender for IoT alerts in Azure portal | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fhow-to-manage-cloud-alerts |\n| View and manage OT sensor alerts locally | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fhow-to-view-alerts |\n| Assign Azure RBAC roles for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fmanage-users-portal |\n| Manage on-premises users on OT network sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fmanage-users-sensor |\n| Apply Zero Trust monitoring to OT networks | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fmonitor-zero-trust |\n| Create CA-signed SSL\u002FTLS certificates for OT sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-deploy\u002Fcreate-ssl-certificates |\n| Use Defender for IoT security recommendations to reduce risk | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Frecommendations |\n| Investigate and respond to OT alerts in Azure | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Frespond-ot-alert |\n| Map Azure RBAC roles for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Froles-azure |\n| Configure on-premises roles for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Froles-on-premises |\n| Configure SSO for Defender for IoT sensor console | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fset-up-sso |\n| Audit user activity in Microsoft Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftrack-user-activity |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Configure custom security alerts for Azure IoT Hub | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fconcept-customizable-security-alerts |\n| Configure Defender for IoT micro agent behavior via module twin | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fconcept-micro-agent-configuration |\n| Meet Linux dependency requirements for Defender micro agent | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fconcept-micro-agent-linux-dependencies |\n| Configure PAM on Linux to audit sign-in events for Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fconfigure-pam-to-audit-sign-in-events |\n| Configure DMI decoder and alternatives for Defender micro agent | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fhow-to-configure-dmi-decoder |\n| Configure Defender for IoT micro agent twin properties | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fhow-to-configure-micro-agent-twin |\n| Configure Defender micro agent for Eclipse ThreadX devices | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fhow-to-threadx-security-module |\n| Create and assign custom Defender for IoT device alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fquickstart-create-custom-alerts |\n| Configure Microsoft Defender for IoT agent-based solution | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Ftutorial-configure-agent-based-solution |\n| Create Defender for IoT micro agent module twin | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Ftutorial-create-micro-agent-module-twin |\n| Use Defender for IoT OT sensor CLI commands | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fcli-ot-sensor |\n| Configure active monitoring methods for OT networks | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fconfigure-active-monitoring |\n| Set up reverse DNS lookup for OT active monitoring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fconfigure-reverse-dns-lookup |\n| Configure OT sensor settings centrally from Azure portal | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fconfigure-sensor-settings-portal |\n| Configure Windows Endpoint Monitoring for OT sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fconfigure-windows-endpoint-monitoring |\n| Configure OT sensor proxy connectivity to Azure | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fconnect-sensors |\n| Use local script to enrich Windows endpoint data | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fdetect-windows-endpoints-script |\n| Import supplemental OT device data into sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fhow-to-import-device-information |\n| Maintain individual OT sensors via sensor console | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fhow-to-manage-individual-sensors |\n| Configure SNMP MIB monitoring for OT sensor health | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fhow-to-set-up-snmp-mib-monitoring |\n| Manage threat intelligence package updates on OT sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fhow-to-work-with-threat-intelligence-packages |\n| Apply networking requirements for Defender for IoT sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fnetworking-requirements |\n| Allow OT sensor connectivity to Azure endpoints | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-deploy\u002Fprovision-cloud-management |\n| Configure ERSPAN on Cisco for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftraffic-mirroring\u002Fconfigure-mirror-erspan |\n| Configure ESXi vSwitch promiscuous mode for mirroring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftraffic-mirroring\u002Fconfigure-mirror-esxi |\n| Configure Hyper-V vSwitch promiscuous mode for mirroring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftraffic-mirroring\u002Fconfigure-mirror-hyper-v |\n| Configure Cisco RSPAN mirroring for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftraffic-mirroring\u002Fconfigure-mirror-rspan |\n| Configure Cisco SPAN port mirroring for OT sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftraffic-mirroring\u002Fconfigure-mirror-span |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Provision Defender micro agent using IoT Hub DPS with X.509 | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fhow-to-provision-micro-agent |\n| Use Defender micro agent API for Eclipse ThreadX integration | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fthreadx-security-module-api |\n| Integrate OT sensor alert management APIs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fapi\u002Fsensor-alert-apis |\n| Integrate OT sensor inventory management APIs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fapi\u002Fsensor-inventory-apis |\n| Use OT sensor vulnerability management APIs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fapi\u002Fsensor-vulnerability-apis |\n| Automate sensor disconnection alerts with Sentinel playbooks | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fautomate-sensor-disconnection-alerts |\n| Forward OT sensor alerts to partner systems | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fhow-to-forward-alert-information-to-partners |\n| Integrate Defender for IoT with ArcSight SIEM | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fintegrations\u002Farcsight |\n| Send Defender for IoT alerts to LogRhythm | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fintegrations\u002Flogrhythm |\n| Send Defender for IoT alerts to RSA NetWitness | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fintegrations\u002Fnetwitness |\n| Connect on-premises Defender for IoT to Sentinel (legacy) | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fintegrations\u002Fon-premises-sentinel |\n| Stream Defender for IoT cloud alerts to external SIEMs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fintegrations\u002Fsend-cloud-data-to-partners |\n| Configure legacy ServiceNow integration for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fintegrations\u002Fservice-now-legacy |\n| Use Sentinel solution to detect IoT threats | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fiot-advanced-threat-monitoring |\n| Connect Defender for IoT with Microsoft Sentinel | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fiot-solution |\n| Access Defender for IoT data via REST APIs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Freferences-work-with-defender-for-iot-apis |\n| Integrate CyberArk with Defender for IoT for credential security | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftutorial-cyberark |\n| Integrate Forescout with Microsoft Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftutorial-forescout |\n| Integrate Fortinet firewalls with Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftutorial-fortinet |\n| Integrate Palo Alto firewalls with Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftutorial-palo-alto |\n| Integrate IBM QRadar with Defender for IoT alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftutorial-qradar |\n| Integrate ServiceNow Operational Technology Manager with Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftutorial-servicenow |\n| Integrate Splunk with Microsoft Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftutorial-splunk |\n| Visualize Defender for IoT data with Azure workbooks | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fworkbooks |\n\n### Deployment\n| Topic | URL |\n|-------|-----|\n| Move Defender for IoT iotsecuritysolutions resource across regions | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Fdevice-builders\u002Fhow-to-region-move |\n| Select OT monitoring appliances for Defender for IoT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002F |\n| Use Dell PowerEdge R350 for OT sensor deployments | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fdell-poweredge-r350-e1800 |\n| Use Dell PowerEdge R360 for OT sensor deployments | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fdell-poweredge-r360-e1800 |\n| Use Dell PowerEdge R660 for OT sensor deployments | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fdell-poweredge-r660 |\n| Deploy Heptagon YB3x appliance for OT monitoring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fheptagon-yb3x |\n| Use HPE DL20 Gen 11 (4SFF) for SMB OT monitoring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fhpe-proliant-dl20-gen-11 |\n| Use HPE DL20 Gen 11 (NHP 2LFF) for SMB\u002FL500 OT monitoring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fhpe-proliant-dl20-gen-11-nhp-2lff |\n| Use legacy HPE DL20 Gen10 for enterprise OT monitoring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fhpe-proliant-dl20-legacy |\n| Use HPE DL20 Gen10 Plus for enterprise OT monitoring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fhpe-proliant-dl20-plus-enterprise |\n| Use HPE DL20 Gen10 Plus (NHP 2LFF) for SMB\u002FL500 OT | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fhpe-proliant-dl20-plus-smb |\n| Deploy Defender for IoT on HPE ProLiant DL360 | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fhpe-proliant-dl360 |\n| Deploy Defender for IoT on HPE ProLiant DL360 Gen 11 | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fhpe-proliant-dl360-gen11 |\n| Deploy OT sensor as Hyper-V Gen 2 virtual appliance | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fvirtual-sensor-hyper-v |\n| Deploy OT sensor as VMware ESXi virtual appliance | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fvirtual-sensor-vmware |\n| Deploy YS-techsystems YS-FIT2 for OT monitoring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fappliance-catalog\u002Fys-techsystems-ys-fit2 |\n| Onboard OT sensors to Defender for IoT in Azure | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fonboard-sensors |\n| Configure and activate Defender for IoT OT sensors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-deploy\u002Factivate-deploy-sensor |\n| Install and initially configure OT sensor software | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-deploy\u002Finstall-software-ot-sensor |\n| Understand Defender for IoT OT deployment phases | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Fot-deploy\u002Fot-deploy-path |\n| Deploy OT sensor with correct traffic mirroring | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-iot\u002Forganizations\u002Ftraffic-mirroring\u002Fset-up-traffic-mirroring |\n",{},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002FMicrosoftDocs\u002FAgent-Skills\u002Fazure-defender-for-iot",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":7,"skillName":5,"commands":36,"prompt":46,"zipAvailable":47},[37,40,43],{"tool":38,"command":39},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill azure-defender-for-iot",{"tool":41,"command":42},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill azure-defender-for-iot",{"tool":44,"command":45},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill azure-defender-for-iot","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FMicrosoftDocs\u002FAgent-Skills\u002Fazure-defender-for-iot\u002FSKILL.md",true,[],[50,64,74,83,89,96],{"skillNo":51,"name":52,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":53,"categories":54,"keywords":60,"publishedAt":22},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[55],{"categoryNo":56,"categoryName":57,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[61,62,63],"model","model hierarchy","model hierarchy skill",{"skillNo":65,"name":66,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":67,"categories":68,"keywords":70,"publishedAt":22},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[69],{"categoryNo":56,"categoryName":57,"taxonomyType":58,"taxonomyTypeDesc":59},[71,72,73],"MCP","zoom","zoom mcp",{"skillNo":75,"name":76,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":77,"categories":78,"keywords":79,"publishedAt":22},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[80,81,82,72],"sdk","zoom apps sdk","apps",{"skillNo":84,"name":85,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":86,"categories":87,"keywords":88,"publishedAt":22},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[85],{"skillNo":90,"name":91,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":92,"categories":93,"keywords":95,"publishedAt":22},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[94],{"categoryNo":56,"categoryName":57,"taxonomyType":58,"taxonomyTypeDesc":59},[91],{"skillNo":97,"name":98,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":99,"categories":100,"keywords":101,"publishedAt":22},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[98]]