Struct Actor 

#[non_exhaustive]
pub struct Actor {
    pub app_name: Option<String>,
    pub app_uid: Option<String>,
    pub authorizations: Option<Vec<Authorization>>,
    pub idp: Option<Box<Idp>>,
    pub invoked_by: Option<String>,
    pub process: Option<Box<Process>>,
    pub session: Option<Box<Session>>,
    pub user: Option<Box<User>>,
}

Actor

The Actor object contains details about the user, role, application, service, or process that initiated or performed a specific activity. Note that Actor is not the threat actor of a campaign but may be part of a campaign.

[] Category: | Name: actor

Constraints:

• at_least_one: [process,user,invoked_by,session,app_name,app_uid]

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

app_name: Option<String>

Application Name

The client application or service that initiated the activity. This can be in conjunction with the user if present. Note that app_name is distinct from the process if present.

optional

app_uid: Option<String>

Application ID

The unique identifier of the client application or service that initiated the activity. This can be in conjunction with the user if present. Note that app_name is distinct from the process.pid or process.uid if present.

optional

authorizations: Option<Vec<Authorization>>

Authorization Information

Provides details about an authorization, such as authorization outcome, and any associated policies related to the activity/event.

optional

idp: Option<Box<Idp>>

Identity Provider

This object describes details about the Identity Provider used.

optional

invoked_by: Option<String>

Invoked by

The name of the service that invoked the activity as described in the event.

optional

process: Option<Box<Process>>

Process

The process that initiated the activity.

recommended

session: Option<Box<Session>>

Session

The user session from which the activity was initiated.

optional

user: Option<Box<User>>

User

The user that initiated the activity or the user context from which the activity was initiated.

recommended

Trait Implementations

impl Clone for Actor

fn clone(&self) -> Actor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Actor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Actor

fn default() -> Actor

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Actor

where Actor: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Actor

fn eq(&self, other: &Actor) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Actor

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Actor