Struct Analytic 

pub struct Analytic {
    pub common: CommonProperties,
    pub name: String,
    pub description: Option<String>,
    pub analytic: Option<String>,
    pub data_sources: Vec<String>,
    pub version: Option<String>,
    pub domains: Vec<String>,
}

Represents a MITRE ATT&CK Analytic (x-mitre-analytic).

Analytics describe detection logic that can be used to identify adversary behavior described by ATT&CK techniques.

Fields

common: CommonProperties

name: String

description: Option<String>

analytic: Option<String>

The detection logic or query

data_sources: Vec<String>

Data sources required for this analytic

version: Option<String>

domains: Vec<String>

Trait Implementations

impl AttackObject for Analytic

fn name(&self) -> &str

fn description(&self) -> Option<&str>

fn revoked(&self) -> bool

fn deprecated(&self) -> bool

impl Clone for Analytic

fn clone(&self) -> Analytic

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Analytic

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Analytic

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Analytic

fn eq(&self, other: &Analytic) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Analytic

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StixObject for Analytic

fn id(&self) -> &str

fn type_(&self) -> &str

fn created(&self) -> DateTime<Utc>

impl Eq for Analytic

impl StructuralPartialEq for Analytic