Struct MalwareInstance 

pub struct MalwareInstance {
    pub common: CommonProperties,
    pub instance_object_refs: Vec<String>,
    pub name: Option<Name>,
    pub aliases: Vec<Name>,
    pub labels: Vec<String>,
    pub description: Option<String>,
    pub field_data: Option<FieldData>,
    pub os_execution_envs: Vec<String>,
    pub architecture_execution_envs: Vec<String>,
    pub capabilities: Vec<Capability>,
    pub os_features: Vec<String>,
}

MAEC Malware Instance

A Malware Instance can be thought of as a single member of a Malware Family that is typically packaged as a binary.

Fields

common: CommonProperties

Common MAEC properties

instance_object_refs: Vec<String>

References to observable objects (typically STIX file objects)

name: Option<Name>

Name of the malware instance

aliases: Vec<Name>

Alternative names/aliases

labels: Vec<String>

Labels describing the instance (e.g., “worm”, “ransomware”)

description: Option<String>

Textual description

field_data: Option<FieldData>

Field data (delivery vectors, timestamps)

os_execution_envs: Vec<String>

Operating systems the malware executes on

architecture_execution_envs: Vec<String>

Processor architectures the malware executes on

capabilities: Vec<Capability>

Capabilities possessed by the malware

os_features: Vec<String>

OS-specific features used

Implementations

impl MalwareInstance

pub fn builder() -> MalwareInstanceBuilder

Creates a new MalwareInstance builder

pub fn new(instance_object_refs: Vec<String>) -> Self

Creates a minimal MalwareInstance with object refs

pub fn validate(&self) -> Result<()>

Validates the MalwareInstance structure

Trait Implementations

impl Clone for MalwareInstance

fn clone(&self) -> MalwareInstance

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MalwareInstance

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for MalwareInstance

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl MaecObject for MalwareInstance

fn id(&self) -> &str

Returns the unique identifier of the object

fn type_(&self) -> &str

Returns the type of the MAEC object (e.g., “package”, “malware-family”)

fn created(&self) -> DateTime<Utc>

Returns when the object was created

impl PartialEq for MalwareInstance

fn eq(&self, other: &MalwareInstance) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for MalwareInstance

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for MalwareInstance