Skill UI

This skill provides a structured guide to querying Azure Monitor activity and sign-in logs using KQL. It is crucial for proactive threat hunting and security incident investigation. Users can detect suspicious administrative actions, including unauthorized role assignments, impossible travel, privilege escalation, and resource modifications within Azure environments. Ideal for SOC analysts and cloud security engineers.