Struct assemblyline_models::datastore::alert::ALResults

pub struct ALResults {Show 16 fields
    pub attrib: Vec<String>,
    pub av: Vec<String>,
    pub behavior: Vec<String>,
    pub detailed: DetailedResults,
    pub domain: Vec<Domain>,
    pub domain_dynamic: Vec<Domain>,
    pub domain_static: Vec<Domain>,
    pub ip: Vec<IP>,
    pub ip_dynamic: Vec<IP>,
    pub ip_static: Vec<IP>,
    pub request_end_time: DateTime<Utc>,
    pub score: i64,
    pub uri: Vec<Uri>,
    pub uri_dynamic: Vec<Uri>,
    pub uri_static: Vec<Uri>,
    pub yara: Vec<String>,
}

Expand description

Assemblyline Results Block

Fields§

§attrib: Vec<String>

List of attribution

§av: Vec<String>

List of AV hits

§behavior: Vec<String>

List of behaviors for the alert

§detailed: DetailedResults

Assemblyline Detailed result block

§domain: Vec<Domain>

List of all domains

§domain_dynamic: Vec<Domain>

List of domains found during Dynamic Analysis

§domain_static: Vec<Domain>

List of domains found during Static Analysis

§ip: Vec<IP>

List of all IPs

§ip_dynamic: Vec<IP>

List of IPs found during Dynamic Analysis

§ip_static: Vec<IP>

List of IPs found during Static Analysis

§request_end_time: DateTime<Utc>

Finish time of the Assemblyline submission

§score: i64

Maximum score found in the submission

§uri: Vec<Uri>

List of all URIs

§uri_dynamic: Vec<Uri>

List of URIs found during Dynamic Analysis

§uri_static: Vec<Uri>

List of URIs found during Static Analysis

§yara: Vec<String>

List of YARA rule hits

Trait Implementations§

impl Described<ElasticMeta> for ALResults

fn metadata() -> Descriptor<ElasticMeta>

Get self description of this type

impl<'de> Deserialize<'de> for ALResults

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more

impl Serialize for ALResults

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
where S: Serializer,

Serialize this value into the given Serde serializer. Read more

Auto Trait Implementations§

impl RefUnwindSafe for ALResults

impl Send for ALResults

impl Sync for ALResults

impl Unpin for ALResults

impl UnwindSafe for ALResults

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T, U> Into<U> for T
where U: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T, U> TryFrom<U> for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,