Skip to content
Please update to the latest release 0.77.2 to address Multiple CVEs.
VQL Reference
Frequently Used
Artifact

Artifact

Plugin

Description

This is the special plugin which automatically runs other artifacts inline.

The Artifact plugin is more similar to a module in e.g. Python, except it does not need to be imported as it is present in any VQL query.

Dereferencing the Artifact plugin with “.” will yield runners for the named artifact.

For example, the following query:

SELECT * FROM Artifact.Generic.Client.Info()

Will run the Generic.Client.Info artifact inline and produce rows available to the VQL above.

This allows artifacts to be nested and call other artifacts.