Aivana Security Investigator
ChatGPT pluginRun safe KQL investigations
Translates user requests into transparent KQL and executes bounded, read-only Defender XDR queries through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution.
- Featured
- No
not on the featured shelf
Movement
From our daily snapshots over the last 30 days.
Rank by placement
Rank in Security
In its category
How this plugin compares with others in the same category. Positions are counted within the category, not across the whole directory.
Security35th of 76 by placement
| # | Plugin | Position | 7d |
|---|---|---|---|
| 33 | #4691 | 9places up | |
| 34 | #4702 | 8places up | |
| 35 | #4705 | 22places down | |
| 36 | #4934 | 65places up | |
| 37 | #4978 | 210places up |
More from Aivana
All listings by AivanaPower BI Desktop#2030 of 11,360 by placement
Aivana CIO Decision Twin#4629 of 11,360 by placement
ForgeMind#5060 of 11,360 by placement
Aivana Dataverse App Architect#5093 of 11,360 by placement
Aivana Database Engineer#5149 of 11,360 by placement
Aivana Power BI Fabric#5234 of 11,360 by placement
3 more on the publisher’s page.
Example prompts
- “Translate this investigation question to KQL and run it safely.”
- “Validate this Defender XDR KQL before running it.”
- “Prepare an evidence package for analyst review.”
Skills
analyst-review
Use when preparing or reviewing a reproducible security evidence package.
investigation
Use when starting or governing an evidence-backed Microsoft security investigation.
xdr-hunting
Use when translating user intent into bounded, validated Microsoft Defender XDR KQL and running it through the direct API.
- Categories
- Sign-in
- On Install
- Capabilities
- Direct OAuth/OBO Defender XDR KQL API, Read-only cross-domain investigations, Evidence packages and analyst review
- Availability
- Available
- Version
- 1.1.1
- Keywords
- defender-xdr, soc, security-investigation, kql, microsoft-graph, sentinel
- Created
- August 30, 2026
- More info
- Sponsorship
- Promote this plugin