rusty_falcon 0.7.1

Rust bindings for CrowdStrike Falcon API
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131

/*
 * CrowdStrike API Specification
 *
 * Use this API specification as a reference for the API endpoints you can use to interact with your Falcon environment. These endpoints support authentication via OAuth2 and interact with detections and network containment. For detailed usage guides and examples, see our [documentation inside the Falcon console](https://falcon.crowdstrike.com/support/documentation).     To use the APIs described below, combine the base URL with the path shown for each API endpoint. For commercial cloud customers, your base URL is `https://api.crowdstrike.com`.    Each API endpoint requires authorization via an OAuth2 token. Your first API request should retrieve an OAuth2 token using the `oauth2/token` endpoint, such as `https://api.crowdstrike.com/oauth2/token`. For subsequent requests, include the OAuth2 token in an HTTP authorization header. Tokens expire after 30 minutes, after which you should make a new token request to continue making API requests.
 *
 * The version of the OpenAPI document: rolling
 *
 * Generated by: https://openapi-generator.tech
 */

use crate::models;

#[derive(Clone, Default, Debug, PartialEq, Serialize, Deserialize)]
pub struct CaohuntingapiIntelligenceQueryEntity {
    #[serde(rename = "adversaries", skip_serializing_if = "Option::is_none")]
    pub adversaries: Option<Vec<String>>,
    #[serde(rename = "content", skip_serializing_if = "Option::is_none")]
    pub content: Option<String>,
    #[serde(rename = "created_at")]
    pub created_at: String,
    #[serde(rename = "depends_on", skip_serializing_if = "Option::is_none")]
    pub depends_on: Option<Vec<String>>,
    #[serde(rename = "description", skip_serializing_if = "Option::is_none")]
    pub description: Option<String>,
    /// Field only available for Counter Adversary Elite Customers
    #[serde(
        rename = "elite_analyst_notes",
        skip_serializing_if = "Option::is_none"
    )]
    pub elite_analyst_notes: Option<String>,
    /// Field only available for Counter Adversary Elite Customers
    #[serde(
        rename = "elite_query_explainer",
        skip_serializing_if = "Option::is_none"
    )]
    pub elite_query_explainer: Option<String>,
    #[serde(rename = "environment", skip_serializing_if = "Option::is_none")]
    pub environment: Option<Vec<String>>,
    #[serde(rename = "has_elite_analyst_notes")]
    pub has_elite_analyst_notes: bool,
    #[serde(rename = "has_elite_query_explainer")]
    pub has_elite_query_explainer: bool,
    #[serde(rename = "id")]
    pub id: String,
    #[serde(rename = "kill_chain", skip_serializing_if = "Option::is_none")]
    pub kill_chain: Option<Vec<String>>,
    #[serde(rename = "language")]
    pub language: String,
    #[serde(rename = "last_updated_at")]
    pub last_updated_at: String,
    #[serde(rename = "malware_families", skip_serializing_if = "Option::is_none")]
    pub malware_families: Option<Vec<String>>,
    #[serde(
        rename = "mitre_technique_ids",
        skip_serializing_if = "Option::is_none"
    )]
    pub mitre_technique_ids: Option<Vec<String>>,
    #[serde(rename = "name")]
    pub name: String,
    #[serde(rename = "provider")]
    pub provider: String,
    #[serde(
        rename = "relates_to_community_alias",
        skip_serializing_if = "Option::is_none"
    )]
    pub relates_to_community_alias: Option<Vec<String>>,
    #[serde(rename = "reports", skip_serializing_if = "Option::is_none")]
    pub reports: Option<Vec<String>>,
    #[serde(rename = "reports_count")]
    pub reports_count: i32,
    #[serde(rename = "subscriptions", skip_serializing_if = "Option::is_none")]
    pub subscriptions: Option<Vec<String>>,
    /// Field that returns all the available AI Translations Target Languages for a query
    #[serde(
        rename = "translated_languages",
        skip_serializing_if = "Option::is_none"
    )]
    pub translated_languages: Option<Vec<String>>,
    /// Optional field that would be filled only if specifically requested via the include_translated_content queryParam
    #[serde(rename = "translations", skip_serializing_if = "Option::is_none")]
    pub translations: Option<Vec<models::CaohuntingapiTranslation>>,
    #[serde(rename = "type")]
    pub r#type: String,
    #[serde(rename = "version")]
    pub version: String,
}

impl CaohuntingapiIntelligenceQueryEntity {
    pub fn new(
        created_at: String,
        has_elite_analyst_notes: bool,
        has_elite_query_explainer: bool,
        id: String,
        language: String,
        last_updated_at: String,
        name: String,
        provider: String,
        reports_count: i32,
        r#type: String,
        version: String,
    ) -> CaohuntingapiIntelligenceQueryEntity {
        CaohuntingapiIntelligenceQueryEntity {
            adversaries: None,
            content: None,
            created_at,
            depends_on: None,
            description: None,
            elite_analyst_notes: None,
            elite_query_explainer: None,
            environment: None,
            has_elite_analyst_notes,
            has_elite_query_explainer,
            id,
            kill_chain: None,
            language,
            last_updated_at,
            malware_families: None,
            mitre_technique_ids: None,
            name,
            provider,
            relates_to_community_alias: None,
            reports: None,
            reports_count,
            subscriptions: None,
            translated_languages: None,
            translations: None,
            r#type,
            version,
        }
    }
}