IntoActivity

Trait IntoActivity 

Source
pub trait IntoActivity<'a> {
    type IntoIter: Iterator<Item = ForensicActivity>
       where Self: 'a;

    // Required method
    fn activity(&'a self) -> Self::IntoIter;
}
Expand description

Quickly transform a structure into one or more user activity events. In order to know what a user did at a high level at a specific moment.

Example: ForensicActivity { timestamp: 06-11-2023 15:18:00.237, user: "", session_id: Unknown, activity: ProgramExecution(\VOLUME{01d98a6b9e4a0a35-1c9e547d}\WINDOWS\SYSWOW64\WINDOWSPOWERSHELL\V1.0\POWERSHELL.EXE) }

impl<'a> IntoActivity<'a> for PrefetchFile {
    fn activity(&'a self) -> Self::IntoIter {
        PrefetchActivityIterator {
            prefetch : self,
            time_pos : 0
        }
    }
 
    type IntoIter = PrefetchActivityIterator<'a> where Self: 'a;
}

Required Associated Types§

Source

type IntoIter: Iterator<Item = ForensicActivity> where Self: 'a

Required Methods§

Source

fn activity(&'a self) -> Self::IntoIter

Implementors§