Struct AnomalyConfig 

pub struct AnomalyConfig {
    pub min_baseline_events: usize,
    pub zscore_threshold: f64,
    pub frequency_window: Duration,
    pub max_access_rate: f64,
    pub enable_temporal_detection: bool,
    pub enable_privilege_escalation: bool,
    pub retention_period: Duration,
}

Configuration for anomaly detection

Fields

min_baseline_events: usize

Minimum number of events before anomaly detection kicks in

zscore_threshold: f64

Z-score threshold for statistical anomalies (typically 2.0-3.0)

frequency_window: Duration

Time window for frequency analysis

max_access_rate: f64

Maximum allowed access rate (events per minute)

enable_temporal_detection: bool

Enable temporal anomaly detection (unusual hours)

enable_privilege_escalation: bool

Enable privilege escalation detection

retention_period: Duration

Retention period for historical data

Trait Implementations

impl Clone for AnomalyConfig

fn clone(&self) -> AnomalyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AnomalyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AnomalyConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AnomalyConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AnomalyConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.