Enum forensic_rs::artifact::WindowsEvents

pub enum WindowsEvents {
    Sysmon,
    System,
    Security,
    Other(String),
    Unknown,
}

Variants

Sysmon

Sysmon event

System

System event

Security

Security event

Other(String)

Other events not defined. The value is the Channel of the event.

Unknown

Trait Implementations

impl Clone for WindowsEvents

fn clone(&self) -> WindowsEvents

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WindowsEvents

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for WindowsEvents

fn default() -> WindowsEvents

Returns the “default value” for a type.

impl Display for WindowsEvents

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Into<Artifact> for WindowsEvents

fn into(self) -> Artifact

Converts this type into the (usually inferred) input type.

impl Into<WindowsEvents> for String

fn into(self) -> WindowsEvents

Converts this type into the (usually inferred) input type.

impl Ord for WindowsEvents

fn cmp(&self, other: &WindowsEvents) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Selfwhere Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Selfwhere Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Selfwhere Self: Sized + PartialOrd,

Restrict a value to a certain interval.

impl PartialEq for WindowsEvents

fn eq(&self, other: &WindowsEvents) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for WindowsEvents

fn partial_cmp(&self, other: &WindowsEvents) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

This method tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

This method tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

This method tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

This method tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for WindowsEvents

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>where S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for WindowsEvents

impl StructuralEq for WindowsEvents

impl StructuralPartialEq for WindowsEvents