OpenAgentSkill Registry Manifest
Skill: azure-kusto-irql
Slug: microsoft-azure-kusto-irql
Category: security
Description: Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution, file creation events.

Agent fit:
- Decision: 70/100 Prototype first
- Primary fit: GitHub automation
- Role: Fallback candidate

Supply profile:
- Track: Coding and developer agents
- Scenario: GitHub automation
- Applicable agents: Claude Code, Browser agents, CLI, Codex, Cursor
- Maintenance: 5d since push
- Risk: Needs review

Trust:
- Trust score: 65/100 Manual review
- Audit: 75/100 Needs review

Attribution:
- Status: Registry indexed
- Source: recursive skill source sync
- Creator: microsoft
- Claim URL: https://www.openagentskill.com/skills/microsoft-azure-kusto-irql#claim-this-skill

Install:
npx skills add microsoft/GitHub-Copilot-for-Azure --skill azure-kusto-irql

URLs:
- Web: https://www.openagentskill.com/skills/microsoft-azure-kusto-irql
- API: https://www.openagentskill.com/api/agent/skills/microsoft-azure-kusto-irql
- Install API: https://www.openagentskill.com/api/skills/microsoft-azure-kusto-irql/install
- Repository: https://github.com/microsoft/GitHub-Copilot-for-Azure/tree/main/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql