Skip to main content

LintRule

rsigma_parser::lint

Enum LintRule

pub enum LintRule {
Show 64 variants    YamlParseError,
    NotAMapping,
    FileReadError,
    SchemaViolation,
    MissingTitle,
    EmptyTitle,
    TitleTooLong,
    MissingDescription,
    MissingAuthor,
    InvalidId,
    InvalidStatus,
    MissingLevel,
    InvalidLevel,
    InvalidDate,
    InvalidModified,
    ModifiedBeforeDate,
    DescriptionTooLong,
    NameTooLong,
    TaxonomyTooLong,
    NonLowercaseKey,
    MissingLogsource,
    MissingDetection,
    MissingCondition,
    EmptyDetection,
    InvalidRelatedType,
    InvalidRelatedId,
    RelatedMissingRequired,
    DeprecatedWithoutRelated,
    InvalidTag,
    UnknownTagNamespace,
    DuplicateTags,
    DuplicateReferences,
    DuplicateFields,
    FalsepositiveTooShort,
    ScopeTooShort,
    LogsourceValueNotLowercase,
    ConditionReferencesUnknown,
    MissingCorrelation,
    MissingCorrelationType,
    InvalidCorrelationType,
    MissingCorrelationRules,
    EmptyCorrelationRules,
    MissingCorrelationTimespan,
    InvalidTimespanFormat,
    MissingGroupBy,
    MissingCorrelationCondition,
    MissingConditionField,
    InvalidConditionOperator,
    ConditionValueNotNumeric,
    GenerateNotBoolean,
    MissingFilter,
    MissingFilterRules,
    EmptyFilterRules,
    MissingFilterSelection,
    MissingFilterCondition,
    FilterHasLevel,
    FilterHasStatus,
    MissingFilterLogsource,
    NullInValueList,
    SingleValueAllModifier,
    AllWithRe,
    EmptyValueList,
    WildcardOnlyValue,
    UnknownKey,
}

Expand description

Identifies which lint rule fired.

Variants§

YamlParseError

NotAMapping

FileReadError

SchemaViolation

MissingTitle

EmptyTitle

TitleTooLong

MissingDescription

MissingAuthor

InvalidId

InvalidStatus

MissingLevel

InvalidLevel

InvalidDate

InvalidModified

ModifiedBeforeDate

DescriptionTooLong

NameTooLong

TaxonomyTooLong

NonLowercaseKey

MissingLogsource

MissingDetection

MissingCondition

EmptyDetection

InvalidRelatedType

InvalidRelatedId

RelatedMissingRequired

DeprecatedWithoutRelated

InvalidTag

UnknownTagNamespace

DuplicateTags

DuplicateReferences

DuplicateFields

FalsepositiveTooShort

ScopeTooShort

LogsourceValueNotLowercase

ConditionReferencesUnknown

MissingCorrelation

MissingCorrelationType

InvalidCorrelationType

MissingCorrelationRules

EmptyCorrelationRules

MissingCorrelationTimespan

InvalidTimespanFormat

MissingGroupBy

MissingCorrelationCondition

MissingConditionField

InvalidConditionOperator

ConditionValueNotNumeric

GenerateNotBoolean

MissingFilter

MissingFilterRules

EmptyFilterRules

MissingFilterSelection

MissingFilterCondition

FilterHasLevel

FilterHasStatus

MissingFilterLogsource

NullInValueList

SingleValueAllModifier

AllWithRe

EmptyValueList

WildcardOnlyValue

UnknownKey

Trait Implementations§

impl Clone for LintRule

fn clone(&self) -> LintRule

Returns a duplicate of the value. Read more

1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more

impl Debug for LintRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

impl Display for LintRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

impl Hash for LintRule

fn hash<H: Hasher>(&self, state: &mut H)

Feeds this value into the given Hasher. Read more

1.3.0 · Source§

fn hash_slice<H>(data: &[Self], state: &mut H)
where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher. Read more

impl PartialEq for LintRule

fn eq(&self, other: &LintRule) -> bool

Tests for self and other values to be equal, and is used by ==.

1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for LintRule

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
where S: Serializer,

Serialize this value into the given Serde serializer. Read more

impl Copy for LintRule

impl Eq for LintRule

impl StructuralPartialEq for LintRule

Auto Trait Implementations§

impl Freeze for LintRule

impl RefUnwindSafe for LintRule

impl Send for LintRule

impl Sync for LintRule

impl Unpin for LintRule

impl UnsafeUnpin for LintRule

impl UnwindSafe for LintRule

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> CloneToUninit for T
where T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)

Performs copy-assignment from self to dest. Read more

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

fn equivalent(&self, key: &K) -> bool

Checks if this value is equivalent to the given key. Read more

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

fn equivalent(&self, key: &K) -> bool

Compare self to key and return true if they are equal.

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T, U> Into<U> for T
where U: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T> ToOwned for T
where T: Clone,

type Owned = T

The resulting type after obtaining ownership.

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more

impl<T> ToString for T
where T: Display + ?Sized,

fn to_string(&self) -> String

Converts the given value to a String. Read more

impl<T, U> TryFrom<U> for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.