Struct CompiledDetectionItem 

pub struct CompiledDetectionItem {
    pub field: Option<String>,
    pub matcher: CompiledMatcher,
    pub exists: Option<bool>,
}

A compiled detection item: a field + matcher.

Fields

field: Option<String>

The field name to check (None for keyword items).

matcher: CompiledMatcher

The compiled matcher combining all values with appropriate logic.

exists: Option<bool>

If Some(true), field must exist; Some(false), must not exist.

Trait Implementations

impl Clone for CompiledDetectionItem

fn clone(&self) -> CompiledDetectionItem

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CompiledDetectionItem

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.