Enum openc2::Action

pub enum Action {
    Scan,
    Locate,
    Query,
    Report,
    Notify,
    Deny,
    Contain,
    Allow,
    Start,
    Stop,
    Restart,
    Pause,
    Resume,
    Cancel,
    Set,
    Update,
    Move,
    Redirect,
    Create,
    Delete,
    Snapshot,
    Detonate,
    Restore,
    Save,
    Throttle,
    Delay,
    Substitute,
    Copy,
    Sync,
    Investigate,
    Mitigate,
    Remediate,
    // some variants omitted
}

The task or activity to be performed.

To support future extension of the OpenC2 language, this enum has a hidden variant that prevents exhaustive matching.

Variants

Scan

The ‘scan’ action is the systematic examination of some aspect of the entity or its environment in order to obtain information.

Locate

The ‘locate’ action is used to find an object either physically, logically, functionally, or by organization.

Query

The ‘query’ action initiates a single request for information.

Report

The ‘report’ action tasks an entity to provide information to a designated recipient of the information.

Notify

The ‘notify’ action is used to set an entity's alerting preferences.

DenyContainAllowStartStopRestartPauseResumeCancelSetUpdateMoveRedirectCreateDeleteSnapshotDetonateRestoreSaveThrottleDelaySubstituteCopySyncInvestigateMitigateRemediate

Methods

impl Action

pub fn controls_information(&self) -> bool

Whether this action is used to gather information needed to determine the current state or enhance cyber situational awareness.

pub fn controls_permissions(&self) -> bool

Whether this action is used to control traffic flow and file permissions (e.g., allow/deny).

pub fn controls_activity(&self) -> bool

Whether this action is used to control the state or the activity of a system, a process, a connection, a host, or a device. The actions are used to execute tasks, adjust configurations, set and update parameters, and modify attributes.

pub fn is_effect(&self) -> bool

Whether this action is an effect-based action.

Effects-based actions are at a higher level of abstraction for purposes of communicating a desired impact rather than a command to execute specific tasks. This level of abstraction enables coordinated actions between enclaves, while permitting a local enclave to optimize its workflow for its specific environment. Effects-based action assumes that the recipient enclave has a decision-making capability because effects-based actions typically do not have a one-to-one mapping to the other actions.

Trait Implementations

impl Debug for Action

fn fmt(&self, __arg_0: &mut Formatter) -> Result

Formats the value using the given formatter.

impl PartialEq for Action

fn eq(&self, __arg_0: &Action) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=.

impl Eq for Action

impl Hash for Action

fn hash<__H: Hasher>(&self, __arg_0: &mut __H)

Feeds this value into the given [Hasher].

fn hash_slice<H>(data: &[Self], state: &mut H) where
    H: Hasher, 

Feeds a slice of this type into the given [Hasher].

impl Clone for Action

fn clone(&self) -> Action

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.