Struct IntelScanner 

pub struct IntelScanner {
    pub client: ScanClient,
    pub sources: Vec<Arc<dyn IntelSource>>,
    pub cache: Option<Arc<IntelCache>>,
    pub cache_ttl_secs: u64,
    pub db: Option<Arc<IntelDb>>,
    pub limiter: Option<Arc<ServiceRateLimiter>>,
}

Intel scanner configuration.

Fields

client: ScanClient

HTTP client shared across all sources.

sources: Vec<Arc<dyn IntelSource>>

Online enrichment sources.

cache: Option<Arc<IntelCache>>

Persistent TTL cache.

cache_ttl_secs: u64

Cache TTL in seconds.

db: Option<Arc<IntelDb>>

Optional offline bulk database.

limiter: Option<Arc<ServiceRateLimiter>>

Per-service rate limiter.

Implementations

impl IntelScanner

pub fn from_config(config: &Config) -> Result<Self>

Build an intel scanner from configuration.

Errors

Returns an error if the cache database cannot be opened.

pub fn new(path: &str) -> Result<Self>

Create a scanner with only the offline bulk database (legacy mode).

pub async fn enrich_target( &self, target: &Target, input: &ScanInput, ) -> Result<usize>

Enrich a single target using all configured sources.

Emits findings via input.emit() and returns the number of enrichments.

Trait Implementations

impl Scanner for IntelScanner

fn name(&self) -> &'static str

Stable scanner name used in logs, configuration, and output metadata.

fn tags(&self) -> &[&'static str]

Scanner capability tags used for module selection and reporting.

fn accepts(&self, target: &Target) -> bool

Return true when this scanner can process the supplied target.

fn run<'life0, 'life1, 'async_trait>( &'life0 self, input: ScanInput, _config: &'life1 Config, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Execute the scan as a pure streaming node in the DAG. Findings and Targets MUST be emitted via input.emit() and input.emit_target().