infrastructure▌

>-

Build and configure a resilient command-and-control infrastructure using BishopFox's Sliver C2 framework with redirectors, HTTPS listeners, and multi-operator support for authorized red team engagements.

Assess and migrate cloud workloads from AWS, GCP, and other providers to Azure services. \n \n Supports migration from AWS Lambda to Azure Functions with scenario-specific conversion rules and best practices \n Generates assessment reports mapping source services to Azure equivalents before any code conversion \n Converts source code to target Azure runtime models using documented migration patterns and MCP tools for best practices \n Outputs all artifacts to a separate <source-folder>-azur

Build and deploy GitHub Copilot SDK applications to Azure with flexible model configuration. \n \n Three scaffolding paths: create new greenfield projects, add SDK services to existing repos, or deploy existing SDK apps with Azure infrastructure \n Supports three model configurations: GitHub's default models, specific GitHub models via discovery, or bring-your-own-model (BYOM) on Azure with DefaultAzureCredential authentication \n Template includes Express/TypeScript API, React/Vite frontend, Bi

Systematic diagnosis and remediation for Azure production issues using AppLens, Azure Monitor, and resource health checks. \n \n Covers Container Apps, Function Apps, and AKS clusters with service-specific troubleshooting guides for image pulls, cold starts, health probes, invocation failures, and node/pod issues \n Includes AppLens MCP integration for AI-powered root cause analysis and Azure Monitor MCP for KQL-based log and metric queries \n Provides a five-step diagnostic flow: identify sympt

Azure compliance scanning, Key Vault expiration auditing, and resource configuration validation against best practices. \n \n Runs azqr (Azure Quick Review) for comprehensive compliance assessment across subscriptions and resource groups \n Monitors Key Vault keys, secrets, and certificates for expiration dates and identifies items without expiration policies \n Detects orphaned resources, misconfigured settings, and security posture issues through Resource Graph queries \n Classifies findings b

Find minimal Azure RBAC roles, generate assignment commands, and provide Bicep infrastructure code. \n \n Identifies built-in roles matching desired permissions using Azure documentation, or generates custom role definitions when no built-in role fits \n Produces Azure CLI commands and Bicep code snippets for role assignments to identities, managed identities, and service principals \n Documents prerequisites for granting roles, including required permissions and recommended least-privilege role

Prepare Azure applications for deployment with infrastructure-as-code, configuration, and containerization. \n \n Generates Bicep or Terraform infrastructure code, azure.yaml configuration, and Dockerfiles based on application type and requirements \n Follows mandatory plan-first workflow: analyze workspace, gather requirements, select deployment recipe (AZD, AZCLI, Bicep, or Terraform), design architecture, and get user approval before code generation \n Supports creation, modernization, and up

Guidance and reference material for instrumenting webapps with Azure Application Insights. \n \n Covers SDK setup, telemetry patterns, and configuration for ASP.NET Core, Node.js, and Python applications hosted in Azure \n Distinguishes between this skill (reference and guidance) and azure-prepare (which orchestrates actual instrumentation changes) \n Recommends auto-instrumentation for C# ASP.NET Core apps on Azure App Service; provides manual instrumentation paths for other stacks \n Includes

Diagnose and resolve Azure Event Hubs and Service Bus SDK issues across languages. \n \n Covers connection failures, authentication errors, AMQP link issues, message lock timeouts, and event processor stalls across Python, Java, JavaScript, and .NET SDKs \n Includes language-specific troubleshooting guides, configuration best practices (retry, prefetch, batch size), and checkpoint/dead-letter diagnostics \n Integrates with Azure Monitor for KQL log queries, resource health checks, and Microsoft