Struct forensic_rs::data::ForensicData

pub struct ForensicData { /* private fields */ }

Basic container for all Forensic Data inside an artifact

Implementations

impl<'a> ForensicData

pub fn new(host: &str, artifact: Artifact) -> Self

pub fn artifact(&self) -> &Artifact

pub fn host(&'a self) -> &'a str

pub fn field(&self, field_name: &str) -> Option<&Field>

pub fn has_field(&self, field_name: &str) -> bool

pub fn field_mut(&'a mut self, field_name: &str) -> Option<&mut Field>

pub fn add_field(&mut self, field_name: &str, field_value: Field)

pub fn insert(&mut self, field_name: Text, field_value: Field)

pub fn i64_field(&'a mut self, field_name: &str) -> Option<i64>

Obtains the casted value of the field into i64 and caches it

pub fn f64_field(&'a mut self, field_name: &str) -> Option<f64>

Obtains the casted value of the field into f64 and caches it

pub fn u64_field(&'a mut self, field_name: &str) -> Option<u64>

Obtains the casted value of the field into u64 and caches it

pub fn ip_field(&'a mut self, field_name: &str) -> Option<Ip>

Obtains the casted value of the field into IP and caches it

pub fn txt_field(&'a mut self, field_name: &str) -> Option<&Text>

Obtains the casted value of the field into Text and caches it

pub fn array_field(&'a mut self, field_name: &str) -> Option<&Vec<Text>>

Obtains the casted value of the field into Vec and caches it

pub fn fields(&self) -> EventIter<'_>

pub fn iter(&self) -> EventIter<'_>

pub fn iter_mut(&mut self) -> EventIterMut<'_>

Trait Implementations

impl Clone for ForensicData

fn clone(&self) -> ForensicData

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ForensicData

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ForensicData

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ForensicData

fn deserialize<D>(deserializer: D) -> Result<ForensicData, D::Error>where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for ForensicData

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for ForensicData

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>where S: Serializer,

Serialize this value into the given Serde serializer.