Struct AdsDocument 

pub struct AdsDocument {
    pub sections: Vec<AdsSectionStatus>,
}

The assembled ADS document for one rule: every section, its presence, and its content.

Fields

sections: Vec<AdsSectionStatus>

One entry per ADS section, in canonical order.

Implementations

impl AdsDocument

pub fn from_rule(rule: &SigmaRule) -> Self

Assemble the ADS document for a rule from its reused fields and rsigma.ads.* sections.

pub fn from_carriers<C: AdsCarriers + ?Sized>(carriers: &C) -> Self

Assemble the ADS document from any AdsCarriers source, so a compiled rule produces the same nine-section document as a parsed one.

pub fn is_empty(&self) -> bool

Whether any section carries content.

pub fn missing_required(&self) -> Vec<&'static str>

The ids of required sections missing from the rule.

Trait Implementations

impl Clone for AdsDocument

fn clone(&self) -> AdsDocument

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AdsDocument

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for AdsDocument

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.