azure-kusto-graph-skills

v0.0.0-placeholder

Kusto graph analysis, IRQL security hunting pipelines, and graph visualization skills for Azure Data Explorer.

Claude Code3 Skills1 MCP serverstdio

By MicrosoftLicense: MIT252 GitHub starsUpdated 11 hours ago

Directory evidence

Runtimes: Claude Code
Parsed components: 4 skill or MCP entries
Source updated: Sep 24, 2026
Manifest status: Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install azure-kusto-graph-skills for Claude Code

Installs for the current user

claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install azure-kusto-graph-skills@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually

$ git clone https://github.com/microsoft/GitHub-Copilot-for-Azure

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/azure-kusto-graph-skills/.

Plugin files

plugins/azure-kusto-graph-skills/

├── .claude-plugin/plugin.json
├── skills/azure-kusto-graph/SKILL.md
├── skills/azure-kusto-irql/SKILL.md
├── skills/azure-kusto-irql-graph/SKILL.md
└── .mcp.json

Included Skills3

azure-kusto-graphskills/azure-kusto-graph/SKILL.md

Build and query Kusto graphs from natural language. Covers transient graphs (make-graph), persistent graph models/snapshots, pattern matching (graph-match), shortest paths, connected components, and graph-to-table export. Generates the edges-first thinking: define edges, define node lookups, union, make-graph. WHEN: make-graph, graph-match, graph-shortest-paths, graph-to-table, graph-mark-components, persistent graph, graph model, graph snapshot, build a graph from data, find paths between nodes, pattern matching in graph, connected components, transient graph, Kusto graph, KQL graph.

azure-kusto-irqlskills/azure-kusto-irql/SKILL.md

Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into composable IRQL pipelines using Get_*, Extract_*, and Enrich_* functions. WHEN: IRQL query, security hunt, threat hunting KQL, incident response query, compose hunting pipeline, failed logins, phishing investigation, lateral movement, process execution, file creation events.

azure-kusto-irql-graphskills/azure-kusto-irql-graph/SKILL.md

Apply IRQL graph functions to KQL or IRQL query results for Kusto Explorer visualization. Generates Lift_To_Graph mappings and composes Graph_Render_View, Graph_Fold_By_Property, Extract_Node_*, Enrich_Node_*, and Enrich_Graph_* calls. Accepts a supplied query or limited basic natural-language source request; it is not a general natural-language-to-KQL/IRQL skill. WHEN: Lift_To_Graph, Graph_Render_View, Graph_Fold_By_Property, IRQL graph enrichment, graph mapping for existing query results, icon-decorated graph, fold graph nodes. Use azure-kusto-graph for native make-graph analysis, graph-match, shortest paths, components, or persistent graphs.

MCP servers1

azurestdio

command: npx
args: -y @azure/mcp@latest server start

Plugin manifests1

plugins/azure-kusto-graph-skills/.claude-plugin/plugin.json

{
  "name": "azure-kusto-graph-skills",
  "description": "Kusto graph analysis, IRQL security hunting pipelines, and graph visualization skills for Azure Data Explorer.",
  "version": "0.0.0-placeholder",
  "author": {
    "name": "Microsoft",
    "url": "https://www.microsoft.com"
  },
  "homepage": "https://github.com/microsoft/github-copilot-for-azure",
  "repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure",
  "license": "MIT",
  "keywords": [
    "azure",
    "kusto",
    "graph",
    "irql",
    "security",
    "kql"
  ],
  "skills": "./skills/",
  "mcpServers": "./.mcp.json",
  "hooks": "./hooks/claude-hooks.json"
}