Enum Category 

#[non_exhaustive]
pub enum Category {
    Integrity,
    Structure,
    Residue,
    Provenance,
    History,
    Concealment,
    Threat,
}

The forensic lens a finding belongs to — the analytical category, not a severity. Fine-grained threat taxonomy (C2, ransomware, injection) lives in the finding’s code and MITRE refs, not in new categories.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Integrity

Integrity / authenticity (CRC, checksum, image completeness).

Structure

Structural contradiction (overlap, out-of-bounds, internal mismatch).

Residue

Residue / recoverability (deleted entries, slack, hidden data).

Provenance

Provenance / attribution (tool, OS, era, vendor fingerprints).

History

History (resize, move, clone, format — the medium’s biography).

Concealment

Concealment / anti-forensics (hidden flags, wiping, misdirection).

Threat

Threat — malicious code or behavior (bootkits, rootkits, injection, C2/beaconing, ransomware indicators).

Implementations

impl Category

pub fn from_code(code: &str) -> Category

Classify a stable finding code into a coarse Category by keyword.

A pragmatic, scheme-agnostic default so analyzers need not hand-map every anomaly variant; an analyzer overrides Observation::category for the codes where this heuristic is wrong (e.g. overloaded BOOT prefixes).

Trait Implementations

impl Clone for Category

fn clone(&self) -> Category

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Category

impl Debug for Category

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for Category

impl Hash for Category

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Category

fn eq(&self, other: &Category) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Category