Struct AnomalyAnalysis 

#[non_exhaustive]
pub struct AnomalyAnalysis {
    pub analysis_targets: Option<Vec<AnalysisTarget>>,
    pub anomalies: Option<Vec<Anomaly>>,
    pub baselines: Option<Vec<Baseline>>,
}

Anomaly Analysis

Describes the analysis of activity patterns and anomalies of target entities to identify potential security threats, performance issues, or other deviations from established baselines. This includes monitoring and analyzing user interactions, API usage, resource utilization, access patterns and other measured indicators.

[] Category: | Name: anomaly_analysis

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

analysis_targets: Option<Vec<AnalysisTarget>>

Analysis Targets

The analysis targets define the scope of monitored activities, specifying what entities, systems or processes are analyzed for activity patterns.

required

anomalies: Option<Vec<Anomaly>>

Anomalies

List of detected activities that significantly deviate from the established baselines. This can include unusual access patterns, unexpected user-agents, abnormal API usage, suspicious traffic spikes, unauthorized access attempts, and other activities that may indicate potential security threats or system issues.

required

baselines: Option<Vec<Baseline>>

Baselines

List of established patterns representing normal activity that serve as reference points for anomaly detection. This includes typical user interaction patterns like common user-agents, expected API access frequencies and patterns, standard resource utilization levels, and regular traffic flows. These baselines help establish what constitutes ‘normal’ activity in the system.

recommended

Trait Implementations

impl Clone for AnomalyAnalysis

fn clone(&self) -> AnomalyAnalysis

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AnomalyAnalysis

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AnomalyAnalysis

fn default() -> AnomalyAnalysis

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AnomalyAnalysis

where AnomalyAnalysis: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AnomalyAnalysis

fn eq(&self, other: &AnomalyAnalysis) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AnomalyAnalysis

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AnomalyAnalysis