rsigma-ir 0.20.0

Intermediate representation for Sigma rules — shared canonical form for eval and convert
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

//! Error types for the lowering pipeline.

#[derive(Debug, thiserror::Error)]
pub enum IrError {
    #[error("lowering error: {0}")]
    Lowering(String),

    #[error("unknown detection identifier: {0}")]
    UnknownDetection(String),

    #[error("invalid modifier combination: {0}")]
    InvalidModifiers(String),

    #[error("incompatible value for modifier: {0}")]
    IncompatibleValue(String),

    #[error("expected numeric value: {0}")]
    ExpectedNumeric(String),

    #[error("selector resolved zero matches but condition required at least one: {0:?}")]
    NoSelectorMatches(Vec<String>),

    #[error("custom attribute {0:?} could not be projected: {1}")]
    CustomAttribute(String, String),

    #[error("parser error in IR context: {0}")]
    Parser(#[from] rsigma_parser::SigmaParserError),
}