Enum RuleType 

#[non_exhaustive]
pub enum RuleType {
    Unspecified,
    SingleEvent,
    MultiEvent,
    UnknownValue(UnknownValue),
}

RuleType indicates the YARA-L rule type of user-created and Google Cloud Threat Intelligence (GCTI) authored rules.

Working with unknown values

This enum is defined as #[non_exhaustive] because Google Cloud may add additional enum variants at any time. Adding new variants is not considered a breaking change. Applications should write their code in anticipation of:

• New values appearing in future releases of the client library, and
• New values received dynamically, without application changes.

Please consult the Working with enums section in the user guide for some guidelines.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Unspecified

The rule type is unspecified/unknown.

SingleEvent

Rule checks for the existence of a single event.

MultiEvent

Rule checks for correlation between multiple events

UnknownValue(UnknownValue)

If set, the enum was initialized with an unknown value.

Applications can examine the value using RuleType::value or RuleType::name.

Implementations

impl RuleType

pub fn value(&self) -> Option<i32>

Gets the enum value.

Returns None if the enum contains an unknown value deserialized from the string representation of enums.

pub fn name(&self) -> Option<&str>

Gets the enum value as a string.

Returns None if the enum contains an unknown value deserialized from the integer representation of enums.

Trait Implementations

impl Clone for RuleType

fn clone(&self) -> RuleType

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuleType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RuleType

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RuleType

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for RuleType

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl From<&str> for RuleType

fn from(value: &str) -> Self

Converts to this type from the input type.

impl From<i32> for RuleType

fn from(value: i32) -> Self

Converts to this type from the input type.

impl PartialEq for RuleType

fn eq(&self, other: &RuleType) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for RuleType

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RuleType