Struct assemblyline_models::datastore::retrohunt::Retrohunt

pub struct Retrohunt {

    pub indices: IndexCatagory,
    pub classification: ExpandingClassification,
    pub search_classification: ClassificationString,
    pub creator: String,
    pub description: Text,
    pub expiry_ts: Option<DateTime<Utc>>,
    pub start_group: u32,
    pub end_group: u32,
    pub created_time: DateTime<Utc>,
    pub started_time: DateTime<Utc>,
    pub completed_time: Option<DateTime<Utc>>,
    pub code: String,
    pub raw_query: String,
    pub yara_signature: String,
    pub errors: Vec<String>,
    pub warnings: Vec<String>,
    pub finished: bool,
    pub truncated: bool,
}

A search run on stored files.

Fields

indices: IndexCatagory

Which archive catagories do we run on

classification: ExpandingClassification

Classification for the retrohunt job

search_classification: ClassificationString

Maximum classification of results in the search

creator: String

User who created this retrohunt job

description: Text

Human readable description of this retrohunt job

expiry_ts: Option<DateTime<Utc>>

Tags describing this retrohunt job“ Expiry timestamp of this retrohunt job

start_group: u32

Earliest expiry group this search will include

end_group: u32

Latest expiry group this search will include

created_time: DateTime<Utc>

Start time for the search.

started_time: DateTime<Utc>

Start time for the search.

completed_time: Option<DateTime<Utc>>

Time that the search finished

code: String

Unique id identifying this retrohunt job

raw_query: String

Text of filter query derived from yara signature

yara_signature: String

Text of original yara signature run

errors: Vec<String>

List of error messages that occured during the search

warnings: Vec<String>

List of warning messages that occured during the search

finished: bool

Boolean that indicates if this retrohunt job is finished

truncated: bool

Indicates if the list of hits been truncated at some limit

Trait Implementations

impl Clone for Retrohunt

fn clone(&self) -> Retrohunt

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Retrohunt

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Described<ElasticMeta> for Retrohunt

fn metadata() -> Descriptor<ElasticMeta>

Get self description of this type

impl<'de> Deserialize<'de> for Retrohunt

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Retrohunt

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.