azure-kusto-irql-graph

原文涵盖的主题

• IRQL Graph Functions -- Query Results to Visualization
• Scope and Routing
• Input Contract
• Activation Triggers
• Environment
• Function Preflight
• IRQL Graph Function Family
• LiftToGraph(T, mappingJson)

Apply the IRQL graph function family to tabular results. Given a KQL or IRQL query and the user's graph description, generate a LiftToGraph mapping and compose only the stored graph functions needed to visualize, fold, extract, or enrich the graph in Kusto Explorer. The source query does not need to use IRQL. | Request | Use | |---|---| | Turn supplied KQL/IRQL rows into an icon-decorated visual graph | This skill: LiftToGraph + GraphRenderView | | Fold nodes or apply ExtractNode, EnrichNode, or EnrichGraph | This skill | | Use make-graph, graph-match, shortest paths, connected components, graph models, or snapshots | azure-kusto-graph | | Author a non-trivial KQL/IRQL investigation from natural language | A Kusto or IRQL query-generation skill, then this skill | If a request mixes visualization and native graph analysis, use this skill for the lift/render portion and azure-kusto-graph for operator semantics. Do not replace graph-lift functions with a hand-built edges-first graph unless the user asks for native graph operators. Preferred input: a working KQL/IRQL query that produces tabular results, plus a natural-language description of the desired nodes, edges, labels, icons, ext

这里只展示节选，请以完整原文和当前要求为准。