Struct CorrelationConfig 

pub struct CorrelationConfig {
    pub max_history_per_session: usize,
    pub session_timeout: Duration,
    pub patterns: Vec<AttackPattern>,
    pub enable_temporal_analysis: bool,
    pub rapid_action_threshold: Duration,
    pub rapid_action_count: usize,
}

Configuration for the action correlator.

Fields

max_history_per_session: usize

Maximum number of actions to retain per session.

session_timeout: Duration

Sessions with no activity beyond this duration are eligible for cleanup.

patterns: Vec<AttackPattern>

Attack patterns to match against.

enable_temporal_analysis: bool

Whether temporal analysis (rapid action detection) is enabled.

rapid_action_threshold: Duration

Actions arriving faster than this interval are considered suspicious.

rapid_action_count: usize

This many rapid actions in a row triggers an alert.

Trait Implementations

impl Clone for CorrelationConfig

fn clone(&self) -> CorrelationConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorrelationConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CorrelationConfig

fn default() -> Self

Returns the “default value” for a type.