azure-kusto-irql
Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution, file creation events.
- Version
- 0.0.0-placeholder
- License
- MIT
Pinned to revision 90929a087ad5, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/azure-kusto-irql/SKILL.md
- skills/azure-kusto-irql/references/EXAMPLES.md
- skills/azure-kusto-irql/references/KUSTO_EXPLORER_LAUNCH.md
- skills/azure-kusto-irql/version.json
Every link opens the file at its source, pinned to the revision this page describes.