Enum ProcessActivityType 

#[repr(u8)]
pub enum ProcessActivityType {
    Launch = 1,
    Terminate = 2,
    Open = 3,
    Inject = 4,
    SetUserId = 5,
    Other = 99,
}

OCSF activity IDs for Process Activity.

Variants

Launch = 1

Process launched / created.

Terminate = 2

Process terminated / exited.

Open = 3

Process opened (e.g., ptrace attach).

Inject = 4

Code injected into process.

SetUserId = 5

UID changed (setuid).

Other = 99

Other (vendor-specific).

Implementations

impl ProcessActivityType

pub const fn as_u8(self) -> u8

Returns the integer representation.

Trait Implementations

impl Clone for ProcessActivityType

fn clone(&self) -> ProcessActivityType

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessActivityType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ProcessActivityType

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for ProcessActivityType

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for ProcessActivityType

fn eq(&self, other: &ProcessActivityType) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ProcessActivityType

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for ProcessActivityType

impl Eq for ProcessActivityType

impl StructuralPartialEq for ProcessActivityType