Struct CorrelationResult 

pub struct CorrelationResult {
    pub session_id: String,
    pub pattern_matches: Vec<PatternMatch>,
    pub rapid_actions: Option<RapidActionAlert>,
    pub escalation: Option<EscalationSequence>,
    pub total_risk: f64,
}

Result of correlating a newly recorded action against known patterns.

Fields

session_id: String

Session the action was recorded in.

pattern_matches: Vec<PatternMatch>

Attack patterns matched after this action.

rapid_actions: Option<RapidActionAlert>

Rapid-fire action alert, if triggered.

escalation: Option<EscalationSequence>

Privilege escalation sequence, if detected.

total_risk: f64

Aggregate risk score for this result.

Trait Implementations

impl Clone for CorrelationResult

fn clone(&self) -> CorrelationResult

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorrelationResult

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.