Enum SigmaValue 

pub enum SigmaValue {
    String(SigmaString),
    Integer(i64),
    Float(f64),
    Bool(bool),
    Null,
}

A typed value from a Sigma detection item.

Detection items can contain strings (with wildcards), numbers, booleans, or null. The re modifier converts strings to regex, and cidr to CIDR.

Variants

String(SigmaString)

String value (may contain wildcards)

Integer(i64)

Integer value

Float(f64)

Floating point value

Bool(bool)

Boolean value

Null

Null / empty value

Implementations

impl SigmaValue

pub fn from_yaml(v: &Value) -> Self

Create a SigmaValue from a serde_yaml::Value.

pub fn from_raw_string(s: &str) -> Self

Create from a raw string (no wildcard parsing — for re modifier).

Trait Implementations

impl Clone for SigmaValue

fn clone(&self) -> SigmaValue

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SigmaValue

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for SigmaValue

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SigmaValue

fn eq(&self, other: &SigmaValue) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SigmaValue

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SigmaValue