kql-query-authoring

•published 2026/01/14

Use this skill when asked to write, create, or help with KQL (Kusto Query Language) queries for Microsoft Sentinel, Defender XDR, or Azure Data Explorer. Triggers on keywords like "write KQL", "create KQL query", "help with KQL", "query [table]", "KQL for [scenario]", or when a user requests queries for specific data analysis scenarios. This skill uses schema validation, Microsoft Learn documentation, and community examples to generate production-ready KQL queries.

📦 Install Skill

Command line install

Install directly with the `skills` CLI.

npx skills add SCStelz/security-investigator/.github/skills/kql-query-authoring

Local download

Download only this skill directory.

Download kql-query-authoring only

File Explorer

0 files

No file selected

readonly

Select a file to view its content

Resources

Repository