tau-engine 1.15.0

A document tagging library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

mod common;

fn print_rule(rule: &tau_engine::Rule) {
    println!("condition: {}", rule.detection.expression);
    let mut keys = rule
        .detection
        .identifiers
        .keys()
        .cloned()
        .collect::<Vec<_>>();
    keys.sort();
    for key in &keys {
        println!(
            "\t{}: {}",
            key,
            rule.detection.identifiers.get(key).unwrap()
        );
    }
}

macro_rules! solve_rule {
    ($rule:expr) => {
        paste::item! {
            #[test]
            fn [< solve_ $rule >] () {
                let rule = common::load_rule($rule).expect("invalid rule");
                print_rule(&rule);
                assert_eq!(rule.validate().unwrap(), true);
            }

            #[test]
            fn [< solve_ $rule _optimised >] () {
                let rule = common::load_optimised_rule($rule);
                print_rule(&rule);
                assert_eq!(rule.validate().unwrap(), true);
            }
        }
    };
}

// Expressions
solve_rule!("array_indexing");
solve_rule!("boolean");
solve_rule!("boolean_group_and");
solve_rule!("boolean_group_or");
solve_rule!("boolean_expression_and");
solve_rule!("boolean_expression_equal");
solve_rule!("boolean_expression_greater_than");
solve_rule!("boolean_expression_greater_than_or_equal");
solve_rule!("boolean_expression_less_than");
solve_rule!("boolean_expression_less_than_or_equal");
solve_rule!("boolean_expression_or");
solve_rule!("cast_flt");
solve_rule!("cast_flt_field");
solve_rule!("cast_int");
solve_rule!("cast_int_field");
solve_rule!("cast_str");
solve_rule!("cast_str_field");
solve_rule!("hash");
solve_rule!("float");
solve_rule!("identifier");
solve_rule!("integer");
solve_rule!("many_ands");
solve_rule!("many_and_nots");
solve_rule!("match_all");
solve_rule!("match_all_duplicate");
solve_rule!("match_all_identifier");
solve_rule!("match_all_matrix");
solve_rule!("match_of_0");
solve_rule!("match_of_1");
solve_rule!("match_of_2");
solve_rule!("negate");
solve_rule!("negate_sequence");
solve_rule!("nested");
solve_rule!("nested_dot_notation");
solve_rule!("search_contains");
solve_rule!("search_ends_with");
solve_rule!("search_exact");
solve_rule!("search_regex");
solve_rule!("search_starts_with");