Struct EventXpMalwareRemediated

pub struct EventXpMalwareRemediated<'a> { /* private fields */ }

Available on crate feature macos_13_0_0 and macOS only.

XProtect remediated malware.

Implementations

impl<'a> EventXpMalwareRemediated<'a>

pub fn signature_version(&self) -> &'a OsStr

Version of the signatures used for detection. Currently corresponds to XProtect version.

pub fn malware_identifier(&self) -> &'a OsStr

String identifying the malware that was remediated.

pub fn incident_identifier(&self) -> &'a OsStr

String identifying the incident, intended for linking multiple malware remediated and remediated events.

pub fn action_type(&self) -> &'a OsStr

String indicating the type of action that was taken, e.g. “path_delete”.

pub fn success(&self) -> bool

True only if remediation was successful.

pub fn result_description(&self) -> &'a OsStr

String describing specific reasons for failure or success.

pub fn remediated_path(&self) -> &'a OsStr

Optional. Path that was subject to remediation, if any. This path is not necessarily a malicious binary, it can also be a legitimate file containing a malicious portion. Specifically, the file at this path may still exist after successful remediation.

pub fn remediated_process_audit_token(&self) -> Option<AuditToken>

Audit token of process that was subject to remediation, if any.

Trait Implementations

impl<'a> Debug for EventXpMalwareRemediated<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Hash for EventXpMalwareRemediated<'a>

fn hash<H: Hasher>(&self, state: &mut H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl<'a> PartialEq for EventXpMalwareRemediated<'a>

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

const fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<'a> Eq for EventXpMalwareRemediated<'a>

impl Send for EventXpMalwareRemediated<'_>

impl Sync for EventXpMalwareRemediated<'_>