Claude commands

Review Mimecast TTP threat logs for URL clicks, malicious attachments, and impersonation attempts

Check Mimecast email delivery queue status and identify stuck or deferred messages

Conversational Microsoft Entra directory reporting via the Graph Enterprise MCP — license usage, user and group counts, application inventory, and directory composition, formatted for client check-ins and QBRs

Run a read-only Microsoft Entra identity hygiene audit via the Graph Enterprise MCP — inactive user accounts, admins without MFA registered, unassigned/wasted licenses, and a guest user inventory

Sweep an organization's networks, devices, and appliance VPN status for a site-health overview

Pull and summarize a Meraki network's L3 firewall rules and flag overly-permissive (any/any allow) rules

Locate a Meraki device by serial, name, or MAC across an organization's networks

Release one or more quarantined Mailprotector messages to their recipients

Onboard a new customer onto Mailprotector - customer, domain, user group, services, users

Review the Mailprotector quarantine at any scope and summarize held messages

Create a Mailprotector block rule for a sender address or domain at a chosen scope

Run the complete M365 offboarding workflow for a departing user - revoke access, handle mailbox, transfer data

Show Microsoft 365 license inventory - available SKUs, consumed seats, and optimization opportunities

Look up a Microsoft 365 user by name or email, showing account status, licenses, MFA, and last sign-in

Audit MFA enrollment across all M365 users, highlighting accounts with no MFA

Check Liongard connectivity and return system health summary

Generate a detailed summary of a Liongard environment

Report exactly what the connected Keeper KSM application can reach - folders, record counts, and record types - reading no credential values

Locate a Keeper record by description and return its UID and metadata without revealing any credential

Search RocketCyber security incidents by account, status, severity, verdict, and date range

Get a security posture summary for a RocketCyber customer account

Search IT Glue documentation by keyword or phrase

Find a configuration item (asset) in IT Glue by name, hostname, serial number, or IP address

Retrieve a password from IT Glue (with security logging)