pub struct File {Show 23 fields
pub archive_ts: Option<DateTime<Utc>>,
pub ascii: String,
pub classification: ExpandingClassification,
pub entropy: f32,
pub expiry_ts: Option<DateTime<Utc>>,
pub is_section_image: bool,
pub is_supplementary: bool,
pub hex: String,
pub labels: Vec<String>,
pub label_categories: LabelCategories,
pub md5: MD5,
pub magic: String,
pub mime: Option<String>,
pub seen: Seen,
pub sha1: Sha1,
pub sha256: Sha256,
pub size: u64,
pub ssdeep: SSDeepHash,
pub file_type: String,
pub tlsh: Option<String>,
pub from_archive: bool,
pub uri_info: Option<URIInfo>,
pub comments: Vec<Comment>,
}
Expand description
Model of File
Fields§
§archive_ts: Option<DateTime<Utc>>
Timestamp indicating when the file was archived.
ascii: String
Dotted ASCII representation of the first 64 bytes of the file
classification: ExpandingClassification
Classification of the file
entropy: f32
Entropy of the file
expiry_ts: Option<DateTime<Utc>>
Expiry timestamp
is_section_image: bool
Is this an image from an Image Result Section?
is_supplementary: bool
Is this a file generated by a service?
hex: String
Hex dump of the first 64 bytes of the file
labels: Vec<String>
List of labels of the file
label_categories: LabelCategories
Categories of label
md5: MD5
MD5 of the file
magic: String
Output from libmagic related to the file
mime: Option<String>
MIME type of the file as identified by libmagic
seen: Seen
Details about when the file was seen
sha1: Sha1
SHA1 hash of the file
sha256: Sha256
SHA256 hash of the file
size: u64
Size of the file in bytes
ssdeep: SSDeepHash
SSDEEP hash of the file
file_type: String
Type of file as identified by Assemblyline
tlsh: Option<String>
TLSH hash of the file“
from_archive: bool
Was loaded from the archive
uri_info: Option<URIInfo>
URI structure to speed up specialty file searching
comments: Vec<Comment>
List of comments made on a file
Implementations§
Trait Implementations§
Source§impl Described<ElasticMeta> for File
impl Described<ElasticMeta> for File
Source§fn metadata() -> Descriptor<ElasticMeta>
fn metadata() -> Descriptor<ElasticMeta>
Source§impl<'de> Deserialize<'de> for File
impl<'de> Deserialize<'de> for File
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Source§impl Distribution<File> for StandardUniform
impl Distribution<File> for StandardUniform
Auto Trait Implementations§
impl Freeze for File
impl RefUnwindSafe for File
impl Send for File
impl Sync for File
impl Unpin for File
impl UnwindSafe for File
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
self
into a Left
variant of Either<Self, Self>
if into_left
is true
.
Converts self
into a Right
variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
self
into a Left
variant of Either<Self, Self>
if into_left(&self)
returns true
.
Converts self
into a Right
variant of Either<Self, Self>
otherwise. Read more