Investigate an Office365 / Azure AD user on Fluency by running all three required reports (GetDirectoryChangesInitiatedByUser, GetDirectoryChangesTargetingUser, GetUserSigninHistory) and producing a single-page HTML investigation report with an activity timeline, executive summary, per-report data tables, and security recommendations. Trigger whenever the user asks to investigate a specific O365 or Azure AD / Entra user — e.g. "investigate O365 user john@contoso.com", "look into what user X did in Office365", "pull a Fluency user investigation for jane@corp.com", "check this Azure AD account on Fluency", "run an O365 user investigation", "what did user X do in Office 365 last week?", or any phrasing implying a focused review of a specific user's sign-in or directory activity in Microsoft 365.
Install with
Claude CodeCodexCursorGitHub CopilotGemini CLI
Supported by the Atlas install prompt. Skill-specific requirements vary.
Skill stats
Skills1CategorySecurityStars0
About this skill
Investigate an Office365 / Azure AD user on Fluency by running all three required reports (GetDirectoryChangesInitiatedByUser, GetDirectoryChangesTargetingUser, GetUserSigninHistory) and producing a single-page HTML investigation report with an activity timeline, executive summary, per-report data tables, and security recommendations. Trigger whenever the user asks to investigate a specific O365 or Azure AD / Entra user — e.g. "investigate O365 user john@contoso.com", "look into what user X did in Office365", "pull a Fluency user investigation for jane@corp.com", "check this Azure AD account on Fluency", "run an O365 user investigation", "what did user X do in Office 365 last week?", or any phrasing implying a focused review of a specific user's sign-in or directory activity in Microsoft 365.
Quick start
Copy the install prompt. Use the green button above this README.
Send it to your agent. Paste it into your coding agent’s chat and send.
Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Investigate an Office365 / Azure AD user on Fluency by running all three required reports (GetDirectoryChangesInitiatedByUser, GetDirectoryChangesTargetingUser, GetUserSigninHistory) and producing a single-page HTML investigation report with an activity timeline, executive summary, per-report data tables, and security recommendations. Trigger whenever the user asks to investigate a specific O365 or Azure AD / Entra user — e.g. "investigate O365 user john@contoso.com", "look into what user X did in Office365", "pull a Fluency user investigation for jane@corp.com", "check this Azure AD account on Fluency", "run an O365 user investigation", "what did user X do in Office 365 last week?", or any phrasing implying a focused review of a specific user's sign-in or directory activity in Microsoft 365.
About this listing
Category
Security
Reported license
Not specified
Listing language (estimated)
English
Review status
Not individually reviewed
Agent compatibility
Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.
Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLI