kql-writing

SkillDatabases & data

Use when the user asks for a KQL query, a Microsoft Sentinel / Defender / Azure Log Analytics detection or hunt, or wants to translate a finding from `/hash-investigation` / `/malware-analysis` into KQL. Format spec + writing guide.

Unavailable. Reviewed instructions are unavailable in Ahel. This skill cannot be added until its reviewed copy is available.