Struct RiskEntityView 

pub struct RiskEntityView {
    pub entity_type: String,
    pub entity_value: String,
    pub score: i64,
    pub tactic_count: u64,
    pub source_count: u64,
    pub result_count: u64,
    pub window_start: i64,
    pub window_end: i64,
    pub last_fired: Option<i64>,
}

A read-only view of one open entity, served by GET /api/v1/risk.

Fields

entity_type: String

The risk-object type.

entity_value: String

The entity value.

score: i64

The accumulated risk score over the window.

tactic_count: u64

The distinct ATT&CK tactic count over the window.

source_count: u64

The distinct contributing-source count over the window.

result_count: u64

Number of contributing detections retained over the window.

window_start: i64

First and last contributing-detection timestamps (unix seconds).

window_end: i64

last_fired: Option<i64>

When this entity last fired an incident, if ever (unix seconds).

Trait Implementations

impl Clone for RiskEntityView

fn clone(&self) -> RiskEntityView

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RiskEntityView

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for RiskEntityView

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.