Struct ThreatFeedManager 

pub struct ThreatFeedManager { /* private fields */ }

Automated threat intelligence feed manager

Implementations

impl ThreatFeedManager

pub async fn new_async( config: ThreatIntelConfig, ) -> Result<Self, Box<dyn Error>>

Create a new threat feed manager with configuration (async version)

pub fn new( config: ThreatIntelConfig, ) -> Result<Self, Box<dyn Error + Send + Sync>>

Create a new threat intelligence manager (synchronous version)

pub fn start_automated_updates( &self, ) -> Result<(), Box<dyn Error + Send + Sync>>

Start automated feed updates in the background

pub fn load_config() -> ThreatIntelConfig

Load configuration from YAML file or environment variables

pub async fn start_automation(&mut self) -> Result<(), Box<dyn Error>>

Start automated feed updates if enabled (Currently simplified implementation)

pub async fn download_all_feeds(&self) -> Result<(), Box<dyn Error>>

Download all enabled feeds immediately

pub async fn get_feed_status(&self) -> HashMap<String, FeedStatus>

Get status of all feeds

pub async fn update_feed(&self, feed_name: &str) -> Result<(), Box<dyn Error>>

Manually trigger update of specific feed

pub fn is_malicious_ip(&self, ip: &IpAddr) -> bool

Check if an IP address is in malicious IP feeds

pub fn is_tor_exit(&self, ip: &IpAddr) -> bool

Check if an IP address is a Tor exit node

pub fn is_proxy_vpn(&self, ip: &IpAddr) -> bool

Check if an IP address is from a VPN or proxy service