pub enum RuleType {
Regex {
pattern: String,
case_sensitive: bool,
},
Entropy {
min_entropy: f64,
min_length: usize,
max_length: usize,
},
Keyword {
keywords: Vec<String>,
context_radius: usize,
require_high_entropy: bool,
},
Composite {
rules: Vec<RuleCondition>,
operator: LogicalOperator,
},
FileSpecific {
file_patterns: Vec<String>,
rule: Box<RuleType>,
},
}Expand description
Types of custom rules
Variants§
Regex
Simple regex pattern matching
Entropy
Entropy-based detection
Keyword
Keyword-based detection with context
Composite
Composite rule combining multiple conditions
FileSpecific
File-based rules (specific to certain file types)
Trait Implementations§
Source§impl<'de> Deserialize<'de> for RuleType
impl<'de> Deserialize<'de> for RuleType
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
Auto Trait Implementations§
impl Freeze for RuleType
impl RefUnwindSafe for RuleType
impl Send for RuleType
impl Sync for RuleType
impl Unpin for RuleType
impl UnsafeUnpin for RuleType
impl UnwindSafe for RuleType
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> DeserializeOwned for Twhere
T: for<'de> Deserialize<'de>,
impl<T> ErasedDestructor for Twhere
T: 'static,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more