Skip to main content

MQL Resource Reference

MQL is a lightweight, ultra-fast query language purpose-built for:

  • Searching and filtering infrastructure configuration data
  • Making checks about infrastructure configuration
  • Building security policies

For an introduction to MQL, read the MQL intro slide deck

To learn how to create queries, checks, and policies in MQL, read Write Effective MQL.

Resource Packs​

A resource is a source of information about an asset in your infrastructure, such as a file, a container image, or an AWS EC2 instance. We've organized MQL resources into packs to make it easy to find what you need.

Core resource pack: The core pack is essential for queries and checks against many different systems. Use it to retrieve information about users, files, packages, ports, and much more.

Operating system resource pack: Some of the resources in the operating system pack span different operating systems, while others are specific to a single operating system.

Network resource pack: The network pack includes resources for querying assets like hostnames and checking certificate contents.

IaC-specific resource packs: These specialized packs let you examine infrastructure-as-code (IaC) files:

Platform-specific resource packs: These specialized packs let you deep-dive into attributes unique to the platforms:

Learn more​

  • To learn about querying your systems with MQL, read the cnquery docs.

  • To learn how to create queries, checks, and policies in MQL, read Write Effective MQL.