Exact public version
azure-kusto-irql v1
Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution, file creation events.
860bc917eedff74a6dba2195dde3eddf8e72fac14d0f5bddc69fb53383fb87f8Package contents
Manifest
Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution, file creation events.
30114cadf2a8d1c3486a3f7c8f65adee3acd02403956bed137444166fc40d014- SKILL.md10,489 bytes
- references/EXAMPLES.md2,284 bytes
- references/KUSTO_EXPLORER_LAUNCH.md2,659 bytes