{"slug":"microsoft-azure-kusto-irql","source_name":"microsoft/azure-kusto-irql","name":"Microsoft/Azure Kusto Irql","description":"Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution, file creation events.","version":1,"lift":{"pass_rate_delta_pts":69.57,"pass_rate_pct":87,"total_cases":23,"passed_cases":20,"tokens_delta_pct":91.1,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-09-08T04:21:13.923201+00:00"},"skill_score":0.8696,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":69.57,"with_pass_pct":87,"without_pass_pct":17.4,"tokens_delta_pct":91.1,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-09-08T04:21:13.923201+00:00","run_id":"3712652d-cf30-4d15-bf02-b6a3a3f9c8e3","latest_attempt":{"id":"3712652d-cf30-4d15-bf02-b6a3a3f9c8e3","runner_model":"gemini-3.6-flash","overall_verdict":"mixed","completed_at":"2026-09-08T04:21:13.923201+00:00","gate":null},"version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"total_uses":0,"total_users":0,"manifest_hash":"6e4aca669688674fb4bc6a3e1a8fc54e92187e8188b8b52a6fc9e8adc706ed24","install_name":"microsoft-azure-kusto-irql","version_id":"0c51b264-1bb0-4db5-a1ef-31bb585b5a19","body_sha256":"6e4aca669688674fb4bc6a3e1a8fc54e92187e8188b8b52a6fc9e8adc706ed24","render_hash":"d2b06ed6190294400fa817f85797dd901607d3706b8aad7137498078e8f75edc","raw_url":"https://app.decimal.ai/s/microsoft-azure-kusto-irql/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/microsoft-azure-kusto-irql"}