github:microsoft/azure-skills · first seen 2026-10-30T20:36:17 · installs n/a · source · badge
Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution,
Freshness 100 · Quality 100 · Efficacy not tested
Efficacy: not tested yet.