Enum ResponseCondition 

pub enum ResponseCondition {
    MinConfidence {
        threshold: f64,
    },
    NotParentedBy {
        process_name: String,
    },
    MinSignalTypes {
        count: usize,
    },
    RepeatCount {
        count: usize,
        window_secs: u64,
    },
    TimeWindow {
        start_hour: u8,
        end_hour: u8,
    },
    Custom {
        name: String,
        params: HashMap<String, String>,
    },
}

Response execution conditions.

Variants

MinConfidence

Confidence score must exceed threshold

Fields

threshold: f64

NotParentedBy

Process must not be child of specific parent

Fields

process_name: String

MinSignalTypes

Incident must involve multiple distinct signals

Fields

count: usize

RepeatCount

Repeated incidents within time window

Fields

count: usize

window_secs: u64

TimeWindow

Current time must be within window (24-hour clock)

Fields

start_hour: u8

end_hour: u8

Custom

Custom condition (MUST be pre-registered)

Fields

name: String

params: HashMap<String, String>

Trait Implementations

impl Debug for ResponseCondition

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ResponseCondition

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ResponseCondition

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.