Struct attck::Collection

pub struct Collection { /* fields omitted */ }

An immutable collection of STIX objects.

A collection has no special meaning beyond being a set of STIX objects all loaded in memory at once.

Usage

Create a Collection by deserializing JSON into Bundle instances and then adding those to a CollectionBuilder. Once all bundles are loaded, call CollectionBuilder::build to finish the collection, which will index the objects and prepare the collection for querying.

Implementations

impl Collection

pub fn builder() -> CollectionBuilder

Create a new CollectionBuilder.

pub fn get<'id, 'a: 'id, D>(&'a self, id: &'id Id) -> Option<Node<'a, D>> where
    Ref<'id, 'a, D>: Resolve<Output = Node<'a, D>>, 

Get the object identified by id if it is present in the collection. This function returns a Node which provides access to the object’s data and its relationships within the collection.

pub fn is_empty(&self) -> bool

Get whether the collection has no items.

pub fn len(&self) -> usize

Get the number of objects in the collection.

impl Collection

Accessors for STIX objects in the collection.

pub fn attack_patterns<'a>(
    &'a self
) -> impl Iterator<Item = Node<'a, AttackPattern>>

pub fn courses_of_action<'a>(
    &'a self
) -> impl Iterator<Item = Node<'a, CourseOfAction>>

pub fn malware<'a>(&'a self) -> impl Iterator<Item = Node<'a, Malware>>

pub fn matrices<'a>(&'a self) -> impl Iterator<Item = Node<'a, Matrix>>

pub fn tactics<'a>(&'a self) -> impl Iterator<Item = Node<'a, Tactic>>

pub fn tools<'a>(&'a self) -> impl Iterator<Item = Node<'a, Tool>>

pub fn campaigns<'a>(&'a self) -> impl Iterator<Item = Node<'a, Campaign>>

pub fn identities<'a>(&'a self) -> impl Iterator<Item = Node<'a, Identity>>

pub fn intrusion_sets<'a>(
    &'a self
) -> impl Iterator<Item = Node<'a, IntrusionSet>>

pub fn infrastructure<'a>(
    &'a self
) -> impl Iterator<Item = Node<'a, Infrastructure>>

pub fn locations<'a>(&'a self) -> impl Iterator<Item = Node<'a, Location>>

pub fn marking_definitions<'a>(
    &'a self
) -> impl Iterator<Item = Node<'a, MarkingDefinition>>

pub fn relationships<'a>(
    &'a self
) -> impl Iterator<Item = Node<'a, Relationship>>

pub fn threat_actors<'a>(
    &'a self
) -> impl Iterator<Item = Node<'a, ThreatActor>>

pub fn vulnerabilities<'a>(
    &'a self
) -> impl Iterator<Item = Node<'a, Vulnerability>>

Trait Implementations

impl From<Bundle<Declaration>> for Collection

fn from(bundle: Bundle<Declaration>) -> Self

Performs the conversion.