Struct Malware 

#[non_exhaustive]
pub struct Malware {
    pub classification_ids: Option<Vec<i64>>,
    pub classifications: Option<Vec<String>>,
    pub cves: Option<Vec<Cve>>,
    pub files: Option<Vec<File>>,
    pub name: Option<String>,
    pub num_infected: Option<i64>,
    pub path: Option<String>,
    pub provider: Option<String>,
    pub severity: Option<String>,
    pub severity_id: Option<i64>,
    pub uid: Option<String>,
}

Malware

The Malware object describes the classification of known malicious software, which is intentionally designed to cause damage to a computer, server, client, or computer network.

[] Category: | Name: malware

Constraints:

• at_least_one: [name,uid]

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

classification_ids: Option<Vec<i64>>

Classification IDs

The list of normalized identifiers of the malware classifications.

required

classifications: Option<Vec<String>>

Classifications

The list of malware classifications, normalized to the captions of the classification_ids values. In the case of ‘Other’, they are defined by the event source.

optional

cves: Option<Vec<Cve>>

CVE List

The list of Common Vulnerabilities and Exposures (CVE) identifiers associated with the malware. Reference: CVE

optional

files: Option<Vec<File>>

Files

The list of file objects representing files that were identified as infected by the malware.

optional

name: Option<String>

Name

The malware name, as reported by the detection engine.

recommended

num_infected: Option<i64>

Number of Infected Entities

The number of files that were identified to be infected by the malware.

optional

path: Option<String>

Path

The filesystem path of the malware that was observed.

recommended

provider: Option<String>

Provider

The name or identifier of the security solution or service that provided the malware detection information.

recommended

severity: Option<String>

Severity

The severity of the malware, normalized to the captions of the severity_id values. In the case of ‘Other’, they are defined by the event source.

optional

severity_id: Option<i64>

Severity ID

The normalized identifier of the malware severity.

recommended

uid: Option<String>

Unique ID

A unique identifier for the specific malware instance, as assigned by the detection engine (e.g., virus signature ID or IPS rule ID).

recommended

Trait Implementations

impl Clone for Malware

fn clone(&self) -> Malware

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Malware

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Malware

fn default() -> Malware

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Malware

where Malware: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Malware

fn eq(&self, other: &Malware) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Malware

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Malware