azure-kusto-irql

github:microsoft/azure-skills · first seen 2026-10-30 · source · badge

Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution,

Works with

azure-kusto-irql-graph
Shares irql, kusto, kql, enrich
0.33
azure-kusto-graph
Shares kusto, irql, kql, natural
0.2

Used with

azure-kusto-irql-graph
Shares irql, kusto, kql, enrich
0.33
azure-kusto-graph
Shares kusto, irql, kql, natural
0.2
azure-kusto
Shares kusto, kql, queries, query
0.19

Skill Health 100 (freshness and quality) estimated by backskills

Listed, not yet scored. This skill has no public model test yet. It is in the scoring queue; submitted skills go first, then the most-installed.

Freshness 100 · Quality 100 · Efficacy not yet tested

Version history

2026-10-30T20:36:17 · sha256 3708f24ab3a0