Skip to main content
Version: VAST v3.1

Frontends

A query language frontend translates the textual representation of a query to VAST's internal representation.

Specifically, the frontend parses the string representation that you enter in a user interface and translates it into an abstract syntax tree (AST) that operates on the semantic building blocks of the language, such as literals, predicates, extractors, and so on.

The frontend is customizable through the query language plugin. For example, the Sigma frontend translates Sigma rules written in YAML to VAST queries. The VAST plugin is the default frontend that implements the language we designed for VAST.

VAST ships with the following frontends: