Struct assemblyline_models::datastore::file::File

pub struct File {

    pub ascii: String,
    pub classification: ExpandingClassification,
    pub entropy: f64,
    pub expiry_ts: Option<DateTime<Utc>>,
    pub is_section_image: bool,
    pub hex: String,
    pub md5: MD5,
    pub magic: String,
    pub mime: Option<String>,
    pub seen: Seen,
    pub sha1: Sha1,
    pub sha256: Sha256,
    pub size: u64,
    pub ssdeep: SSDeepHash,
    pub file_type: String,
    pub tlsh: Option<String>,
    pub from_archive: bool,
    pub uri_info: Option<URIInfo>,
}

Model of File

Fields

ascii: String

Dotted ASCII representation of the first 64 bytes of the file

classification: ExpandingClassification

Classification of the file

entropy: f64

Entropy of the file

expiry_ts: Option<DateTime<Utc>>

Expiry timestamp

is_section_image: bool

Is this an image from an Image Result Section?

hex: String

Hex dump of the first 64 bytes of the file

md5: MD5

MD5 of the file

magic: String

Output from libmagic related to the file

mime: Option<String>

MIME type of the file as identified by libmagic

seen: Seen

Details about when the file was seen

sha1: Sha1

SHA1 hash of the file

sha256: Sha256

SHA256 hash of the file

size: u64

Size of the file in bytes

ssdeep: SSDeepHash

SSDEEP hash of the file

file_type: String

Type of file as identified by Assemblyline

tlsh: Option<String>

TLSH hash of the file“

from_archive: bool

Was loaded from the archive

uri_info: Option<URIInfo>

URI structure to speed up specialty file searching

Trait Implementations

impl Clone for File

fn clone(&self) -> File

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Described<ElasticMeta> for File

fn metadata() -> Descriptor<ElasticMeta>

Get self description of this type

impl<'de> Deserialize<'de> for File

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for File

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.