Introduction to Message Query Language (MQL) · Blog · Sublime Security

## Executive Summary This blog post introduces Message Query Language (MQL), a readable DSL used by the Sublime email security platform for writing detection rules, hunting threats, and inspecting messages. It covers the Message Data Model (MDM), core syntax and functions (string, regex, file analysis, ML, beta modules), list usage, and the interactive editor with examples demonstrating how defenders can author and test email detections without describing a specific security incident.