# azure-kusto-irql

> Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations.

Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution, file creation events.

- Type: Skill
- Made by: microsoft
- Category: Security
- Formats: Skills
- Version: 1.2.1
- Source: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql
- Page: https://pluginboard.ai/skills/azure-kusto-irql

## Works with

- ChatGPT
- Claude
- Gemini
- GitHub Copilot
- Cursor
- Claude Code
- Codex
- Antigravity
- Gemini CLI
- Replit
- OpenClaw
- OpenCode
- Hermes Agent

## Install

### ChatGPT

In ChatGPT: Download the azure-kusto-irql folder and zip it, then Plugins → Skills → Create → Upload from your computer. Business and Enterprise plans.

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### Claude

In Claude (web or desktop): Download the azure-kusto-irql folder and zip the folder itself, then upload it in Customize → Skills.

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### Gemini

In Gemini: Download the azure-kusto-irql folder, then at gemini.google.com click Customize → Skills → Create → Upload and pick the folder (or a .zip of it).

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### GitHub Copilot

Run in your terminal:

```shell
npx -y degit microsoft/skills/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql ~/.copilot/skills/azure-kusto-irql
```

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### Cursor

Run in your terminal:

```shell
npx -y degit microsoft/skills/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql ~/.cursor/skills/azure-kusto-irql
```

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### Claude Code

Run in your terminal:

```shell
npx -y degit microsoft/skills/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql ~/.claude/skills/azure-kusto-irql
```

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

Or all of Azure Kusto Graph Skills, in Claude Code:

```text
/plugin marketplace add microsoft/skills
/plugin install azure-kusto-graph-skills@skills
```

### Codex

Run in your terminal:

```shell
npx -y degit microsoft/skills/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql ~/.agents/skills/azure-kusto-irql
```

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### Antigravity

In Antigravity: Copy the azure-kusto-irql folder into ~/.gemini/config/skills (Antigravity app and IDE) or ~/.gemini/antigravity-cli/skills (Antigravity CLI).

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### Gemini CLI

Run in your terminal:

```shell
npx -y degit microsoft/skills/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql ~/.gemini/skills/azure-kusto-irql
```

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### Replit

Run in your terminal:

```shell
npx -y degit microsoft/skills/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql .agents/skills/azure-kusto-irql
```

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### OpenClaw

Run in your terminal:

```shell
npx -y degit microsoft/skills/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql ~/.openclaw/skills/azure-kusto-irql
```

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### OpenCode

Run in your terminal:

```shell
npx -y degit microsoft/skills/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql ~/.config/opencode/skills/azure-kusto-irql
```

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

### Hermes Agent

Run in your terminal:

```shell
npx -y degit microsoft/skills/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql ~/.hermes/skills/azure-kusto-irql
```

View the folder on GitHub: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql

---
From Pluginboard (https://pluginboard.ai).