Struct K2KCaseCreation 

pub struct K2KCaseCreation {
    pub id: MessageId,
    pub case_id: u64,
    pub entity_id: u64,
    pub related_entities: [u64; 4],
    pub related_count: u8,
    pub kernel_ids: [u64; 4],
    pub kernel_count: u8,
    pub total_risk: u8,
    pub priority: u8,
    pub timestamp: u64,
}

K2K cross-kernel case creation.

When multiple kernels detect related suspicious activity, create a unified case.

Type ID: 355

Fields

id: MessageId

Message ID.

case_id: u64

Case ID.

entity_id: u64

Primary entity ID.

related_entities: [u64; 4]

Related entity IDs (up to 4).

related_count: u8

Number of related entities.

kernel_ids: [u64; 4]

Contributing kernel IDs (up to 4).

kernel_count: u8

Number of contributing kernels.

total_risk: u8

Total risk score.

priority: u8

Case priority: 1=low, 2=medium, 3=high, 4=critical.

timestamp: u64

Creation timestamp.

Trait Implementations

impl Archive for K2KCaseCreation

where MessageId: Archive, u64: Archive, [u64; 4]: Archive, u8: Archive,

type Archived = ArchivedK2KCaseCreation

The archived representation of this type.

type Resolver = K2KCaseCreationResolver

The resolver for this type. It must contain all the additional information from serializing needed to make the archived type from the normal type.

unsafe fn resolve( &self, pos: usize, resolver: Self::Resolver, out: *mut Self::Archived, )

Creates the archived version of this value at the given position and writes it to the given output.

impl Clone for K2KCaseCreation

fn clone(&self) -> K2KCaseCreation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for K2KCaseCreation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<__D: Fallible + ?Sized> Deserialize<K2KCaseCreation, __D> for Archived<K2KCaseCreation>

where MessageId: Archive, Archived<MessageId>: Deserialize<MessageId, __D>, u64: Archive, Archived<u64>: Deserialize<u64, __D>, [u64; 4]: Archive, Archived<[u64; 4]>: Deserialize<[u64; 4], __D>, u8: Archive, Archived<u8>: Deserialize<u8, __D>,

fn deserialize( &self, deserializer: &mut __D, ) -> Result<K2KCaseCreation, __D::Error>

Deserializes using the given deserializer

impl RingMessage for K2KCaseCreation

fn message_type() -> u64

Get the message type discriminator.

fn message_id(&self) -> MessageId

Get the message ID.

fn correlation_id(&self) -> CorrelationId

Get the correlation ID (if any).

fn priority(&self) -> Priority

Get the priority.

fn serialize(&self) -> Vec<u8>

Serialize the message to bytes.

fn deserialize(bytes: &[u8]) -> Result<Self>

where Self: Sized,

Deserialize a message from bytes.

fn size_hint(&self) -> usize

Get the serialized size hint.

impl<__S: Fallible + ?Sized> Serialize<__S> for K2KCaseCreation

where MessageId: Serialize<__S>, u64: Serialize<__S>, [u64; 4]: Serialize<__S>, u8: Serialize<__S>,

fn serialize(&self, serializer: &mut __S) -> Result<Self::Resolver, __S::Error>

Writes the dependencies for the object and returns a resolver that can create the archived type.