azure-kusto-irql

github:microsoft/azure-skills · first seen 2026-10-30T20:36:17 · installs n/a · source · badge

Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution,

Works with

azure-kusto-irql-graph
Shares irql, kusto, kql, enrich
0.33
azure-kusto-graph
Shares kusto, irql, kql, natural
0.2

Woven into by

azure-kusto-irql-graph
Shares irql, kusto, kql, enrich
0.33
azure-kusto-graph
Shares kusto, irql, kql, natural
0.2
azure-kusto
Shares kusto, kql, queries, query
0.19

Skill Health 100 estimated by backskills

Freshness 100 · Quality 100 · Efficacy not tested

Efficacy: not tested yet.

Version history

2026-10-30T20:36:17 · sha256 3708f24ab3a0