Agent Skills: azure-kusto-irql

Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution, file creation events.

UncategorizedID: microsoft/agent-skills/azure-kusto-irql

Install this agent skill to your local

pnpm dlx add-skill https://github.com/microsoft/agent-skills/azure-kusto-irql

Skill Files

Browse the full folder contents for azure-kusto-irql.

Download Skill

Loading file tree…

Select a file to preview its contents.